From 0c91cc8333b4785406729df32e8323fc64c2e817 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <vbarzin@gmail.com>
Date: Sun, 21 Jan 2024 03:36:10 +0000
Subject: [PATCH] add helper scripts to upgrade all clusters and renew node
 certs [ci skip]

---
 renew_worker_certs.sh |  9 +++++++++
 update_k8s_worker.sh  | 24 ++++++++++++++++++++++++
 2 files changed, 33 insertions(+)
 create mode 100755 renew_worker_certs.sh
 create mode 100755 update_k8s_worker.sh

diff --git a/renew_worker_certs.sh b/renew_worker_certs.sh
new file mode 100755
index 00000000..1568d99a
--- /dev/null
+++ b/renew_worker_certs.sh
@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+echo 'KUBELET_KUBEADM_ARGS="--container-runtime-endpoint=unix:///var/run/containerd/containerd.sock --pod-infra-container-image=k8s.gcr.io/pause:3.7 --rotate-certificates=true --rotate-server-certificates=true"' | sudo tee /var/lib/kubelet/kubeadm-flags.env
+
+sudo systemctl daemon-reload
+sudo systemctl restart kubelet
+
+# Aprprove all csrs:
+# for csr in $(kb get csr | grep Pending | awk '{print $1}'); do echo $csr; kb certificate approve $csr; done
diff --git a/update_k8s_worker.sh b/update_k8s_worker.sh
new file mode 100755
index 00000000..65eb261c
--- /dev/null
+++ b/update_k8s_worker.sh
@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+
+# run for all nodes using :
+# for n in $(kbn | grep 'k8s-node' | awk '{print $1}'); do echo $n; kb drain $n --ignore-daemonsets --delete-emptydir-data; s wizard@$n 'bash -s' <update_k8s_worker.sh; kb uncordon $n; done
+
+set -e
+export stable_version='1.28'  # change me
+export release="$stable_version.6"  # change me
+
+echo "Upgrading to $stable_version"
+
+echo "deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v$stable_version/deb/ /" | sudo tee /etc/apt/sources.list.d/kubernetes.list
+sudo mkdir -p /etc/apt/keyrings
+curl -fsSL "https://pkgs.k8s.io/core:/stable:/v$stable_version/deb/Release.key" | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg --batch --yes
+
+sudo apt-mark unhold kubeadm kubelet kubectl
+sudo apt-get update 
+sudo apt-get install -y kubeadm="$release-*" kubelet="$release-*" kubectl="$release-*"
+sudo apt-mark hold kubeadm kubelet kubectl
+
+sudo kubeadm upgrade node # Comment me out for master node; on master run kubeadm upgrade plan && kubeadm upgrade apply
+
+sudo systemctl daemon-reload
+sudo systemctl restart kubelet