<p>After having changed the IP configuration of the cluster (all <em>external</em> IPs changed, the internal private IPs remained the same), some <code>kubectl</code> commands do not work anymore for any container.  The pods are all up and running, and seem to find themselves without problems.  Here is the output:</p>

<pre><code>bronger@penny:~$ time kubectl logs jb-plus--prod-615777041-71s09
Error from server (InternalError): Internal error occurred: Authorization error (user=kube-apiserver-kubelet-client, verb=get, resource=nodes, subresource=proxy)

real    0m30,539s
user    0m0,441s
sys     0m0,021s
</code></pre>

<p>Apparently, there is a 30 seconds timeout, and after that the authorisation error.</p>

<p>What may cause this?</p>

<p>I run Kubernetes 1.8 with Weave Net.</p>

<p>Based on the symptom  new ip missing from the certificate. use the below command to validate.</p>

<pre><code> openssl x509 -in /etc/kubernetes/pki/apiserver.crt -noout -text |grep DNS
</code></pre>
