Renew kube certificates if expiring

try_renew_kube.sh

#!/bin/bash

kubeadm certs check-expiration | grep -B999 "CERTIFICATE AUTHORITY" | grep -E "no +$" | grep -E "( [0-9]d |invalid)"

if [[ $? == 0 ]]; then
	echo "Certificates to renew!"
	kubeadm certs renew all
	crictl ps --label io.kubernetes.pod.namespace=kube-system -q | xargs crictl stop
	echo "OK"
else
	echo "Nothing to do."
fi

And replace kubeadm certs with kubeadm alpha certs for old clusters...