BUG: After Sealos upgraded the Kubernetes cluster, the certificate validity period changed from 99 years to 1 year.

[MuJianning]

Sealos Version

v4.3.3

How to reproduce the bug?

1. 安装集群

echo "deb [trusted=yes] https://apt.fury.io/labring/ /" | tee /etc/apt/sources.list.d/labring.list
apt update
apt install -y sealos=4.3.3

cd ~/.ssh
ssh-keygen -t rsa

ssh-copy-id 192.168.137.12
ssh-copy-id 192.168.137.13

cd ~

sealos run \
  labring/kubernetes:v1.27.4 \
  labring/helm:v3.12.3 \
  labring/calico:v3.25.1 \
  --masters 192.168.137.11,192.168.137.12,192.168.137.13

2. 升级集群

sealos run labring/kubernetes:v1.27.5

What is the expected behavior?

证书有效期99年

What do you see instead?

证书有效期1年

Operating environment

- Sealos version:v4.3.3
- Docker version:v1.6.23
- Kubernetes version:v1.27.4, v1.27.5
- Operating system:Ubuntu:v22.04
- Runtime environment:virtual machine (virbox, 4G memory, 2 core cpu, 50G storage)
- Cluster size:3 master, 0 node
- Additional information:helm:v3.12.3, calico:v3.25.1

Additional information

No response

[soulmz]

和我的问题相同，应该是 kubeadm 的问题。 猜测 kubeadm 的 kubeadm cert 证书修改的问题 #4312

[sealos-ci-robot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

The same problem as mine, it should be a problem with kubeadm. Guess the problem of modifying the kubeadm cert certificate of kubeadm #4312

[stale[bot]]

This issue has been automatically closed because we haven't heard back for more than 60 days, please reopen this issue if necessary.

[LiaoSirui]

same

[caijian76]

same

[sealos-ci-robot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

same

[stale[bot]]

This issue has been automatically closed because we haven't heard back for more than 60 days, please reopen this issue if necessary.

[bxy4543]

kubeadm upgrade need --certificate-renewal=false

[sealos-ci-robot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

kubeadm upgrade need --certificate-renewal=false

[ghostloda]

kubeadm upgrade need --certificate-renewal=false

/assign