Certificate Renew in CSK

[KuasarCloud]

Hey all,

Had a CKS control-plane cert expire and cause API server auth failures. Had to manually run kubeadm certs renew all + restart the static pods to fix it.

Is automatic cert renewal just not a thing for CKS-provisioned clusters, or am I missing a mechanism? Couldn't find anything about it in the docs. Wanted to check before filing an issue.

Thanks!

[StepBee]

Hi @KuasarCloud ,

i did stumble across the same thing in the past as well - because i did not follow the idea of kubernetes.
Certificates will expire after one year.
During a control-plane upgrade, the certificates are renewed automatically.

Therefore the idea is to update your kubernetes version via Cloudstacks CKS Update feature at least once per year and you won't stumble across the issue anymore.
https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#automatic-certificate-renewal