Day 19/#30daysofK8s

For someone who is completely new to the cluster architecture and wants to understand the certificate information can look at the kube-apiserver service to get started — cat /etc/systemd/system/kube-apiserver.service or by cat /etc/kubernetes/manifests/kube-apiserver.yaml if provisioned by kubeadm.

Check for certificate path, CN Name, ALT Names, issuer and expiration data.

Use openssl x509 -in path_to_certificate.crt -text -noout to see all the above information.

Use journalctl -u <service_name>.service -l to check logs in case something ever goes wrong.