The upstream procedure is here:
https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/
It’s complex.

There is a feature in StarlingX R6 to provide abstract higher-level commands (less complex and less error prone) to execute this procedure.

Greg.

From: Rai, Ankush <Ankush.Rai@commscope.com>
Sent: Tuesday, May 18, 2021 10:18 AM
To: starlingx-discuss@lists.starlingx.io
Subject: [Starlingx-discuss] How to update the Kubernetes root CA certificate and key in a running system

[Please note: This e-mail is from an EXTERNAL e-mail address]

Hi,

Starlingx documentation says that the Replacing the root CA certificate is an involved process.

<https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap_configs.html#k8s-root-ca-cert-key-r4>

I have a two question here,

1. Is there any Root CA and key replacement process available ? If yes, please provide the documentations link.
2. If the process is not available then is there any manual way to replace the root CA and key ?

Thanks,

Ankush