The upstream procedure is here: https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/ It's complex. There is a feature in StarlingX R6 to provide abstract higher-level commands (less complex and less error prone) to execute this procedure. Greg. From: Rai, Ankush <Ankush.Rai@commscope.com> Sent: Tuesday, May 18, 2021 10:18 AM To: starlingx-discuss@lists.starlingx.io Subject: [Starlingx-discuss] How to update the Kubernetes root CA certificate and key in a running system [Please note: This e-mail is from an EXTERNAL e-mail address] Hi, Starlingx documentation says that the Replacing the root CA certificate is an involved process. <https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap_configs.html#k8s-root-ca-cert-key-r4> I have a two question here, 1. Is there any Root CA and key replacement process available ? If yes, please provide the documentations link. 2. If the process is not available then is there any manual way to replace the root CA and key ? Thanks, Ankush