The upstream procedure is here:
https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/
It’s complex.

 

There is a feature in StarlingX R6 to provide abstract higher-level commands (less complex and less error prone) to execute this procedure.

 

Greg.

 

From: Rai, Ankush <Ankush.Rai@commscope.com>
Sent: Tuesday, May 18, 2021 10:18 AM
To: starlingx-discuss@lists.starlingx.io
Subject: [Starlingx-discuss] How to update the Kubernetes root CA certificate and key in a running system

 

[Please note: This e-mail is from an EXTERNAL e-mail address]

Hi,

 

Starlingx documentation says that the Replacing the root CA certificate is an involved process.  

<https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap_configs.html#k8s-root-ca-cert-key-r4>

 

I have a two question here,

  1. Is there any Root CA and key replacement process available ? If yes, please provide the documentations link.
  2. If the process is not available then is there any manual way to replace the root CA and key ?

 

Thanks,

Ankush