[Starlingx-discuss] How to update the Kubernetes root CA certificate and key in a running system

Waines, Greg Greg.Waines at windriver.com
Tue May 18 14:35:42 UTC 2021


The upstream procedure is here:
https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/
It's complex.

There is a feature in StarlingX R6 to provide abstract higher-level commands (less complex and less error prone) to execute this procedure.

Greg.

From: Rai, Ankush <Ankush.Rai at commscope.com>
Sent: Tuesday, May 18, 2021 10:18 AM
To: starlingx-discuss at lists.starlingx.io
Subject: [Starlingx-discuss] How to update the Kubernetes root CA certificate and key in a running system

[Please note: This e-mail is from an EXTERNAL e-mail address]
Hi,

Starlingx documentation says that the Replacing the root CA certificate is an involved process.
<https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap_configs.html#k8s-root-ca-cert-key-r4>

I have a two question here,

  1.  Is there any Root CA and key replacement process available ? If yes, please provide the documentations link.
  2.  If the process is not available then is there any manual way to replace the root CA and key ?

Thanks,
Ankush
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20210518/c06a478c/attachment-0001.html>


More information about the Starlingx-discuss mailing list