The upstream procedure is here:

https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/

Greg.

 

From: "Dharwadkar, Sriram" <Sriram.Dharwadkar@commscope.com>
Date: Friday, January 29, 2021 at 6:20 AM
To: "starlingx-discuss@lists.starlingx.io" <starlingx-discuss@lists.starlingx.io>
Subject: [Starlingx-discuss] Procedure to update k8s_root_ca_cert and k8s_root_ca_key in StarlingX-4.0

 

[Please note: This e-mail is from an EXTERNAL e-mail address]

Hi,

 

We are using Distributed StarlingX-4.0.

As per the documentation https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap_configs.html

k8s_root_ca_cert and k8s_root_ca_key are install time only parameters. Documentation says updating k8s_root_ca_cert and k8s_root_ca_key is an involved process.

Can you please share the procedure for updating root_ca and root_key ?

We have a usecase to update this cert and key during runtime, with reboot it should take new root_ca and root_key, is this possible ?

 

Regards,
Sriram