OCPv4: check expiration of node kubelet server/client certs

check-node-kubelet-certs.sh

#!/bin/bash

MASTERS="master0 master1 master2"
WORKERS="worker0 worker1"

echo "Checking expiration dates for all node /var/lib/kubelet/pki/kubelet-{server,client}-current certs ..." >&2
echo >&2
for h in $MASTERS $WORKERS; do
    echo $h
    ssh $h 'for f in kubelet-{server,client}-current.pem; do printf "\t$f: "; sudo openssl x509 -enddate -noout -in /var/lib/kubelet/pki/$f; done'
done