If you don't want to change vip, just need:
- Install a new master node with previous certificates
- Install haproxy and keepalived
- Stop the old master node
If you need to change a new vip, you need:
- Generate new certificates
- Execute master, haproxy and keepalived installation steps in your new hosts
- Sync all worker nodes' /etc/sysconfig/kubeconfig file