[Starlingx-discuss] Procedure to update k8s_root_ca_cert and k8s_root_ca_key in StarlingX-4.0

Waines, Greg Greg.Waines at windriver.com
Fri Jan 29 13:08:14 UTC 2021


The upstream procedure is here:
https://kubernetes.io/docs/tasks/tls/manual-rotation-of-ca-certificates/
Greg.

From: "Dharwadkar, Sriram" <Sriram.Dharwadkar at commscope.com>
Date: Friday, January 29, 2021 at 6:20 AM
To: "starlingx-discuss at lists.starlingx.io" <starlingx-discuss at lists.starlingx.io>
Subject: [Starlingx-discuss] Procedure to update k8s_root_ca_cert and k8s_root_ca_key in StarlingX-4.0

[Please note: This e-mail is from an EXTERNAL e-mail address]
Hi,

We are using Distributed StarlingX-4.0.
As per the documentation https://docs.starlingx.io/deploy_install_guides/r4_release/ansible_bootstrap_configs.html
k8s_root_ca_cert and k8s_root_ca_key are install time only parameters. Documentation says updating k8s_root_ca_cert and k8s_root_ca_key is an involved process.
Can you please share the procedure for updating root_ca and root_key ?
We have a usecase to update this cert and key during runtime, with reboot it should take new root_ca and root_key, is this possible ?

Regards,
Sriram
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20210129/2c43b751/attachment.html>


More information about the Starlingx-discuss mailing list