The upstream procedure is here: https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/ Greg. From: "Dharwadkar, Sriram" <Sriram.Dharwadkar@commscope.com> Date: Friday, January 29, 2021 at 6:20 AM To: "starlingx-discuss@lists.starlingx.io" <starlingx-discuss@lists.starlingx.io> Subject: [Starlingx-discuss] Procedure to update k8s_root_ca_cert and k8s_root_ca_key in StarlingX-4.0 [Please note: This e-mail is from an EXTERNAL e-mail address] Hi, We are using Distributed StarlingX-4.0. As per the documentation https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap... k8s_root_ca_cert and k8s_root_ca_key are install time only parameters. Documentation says updating k8s_root_ca_cert and k8s_root_ca_key is an involved process. Can you please share the procedure for updating root_ca and root_key ? We have a usecase to update this cert and key during runtime, with reboot it should take new root_ca and root_key, is this possible ? Regards, Sriram