-
Notifications
You must be signed in to change notification settings - Fork 236
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove "certs expire in 7 days" messages #848
Comments
@cfergeau Can we use #689 on for that?
Since we delete |
In the 4.2.2 cluster I'm looking at
crc code is
|
With OpenShift 4.2.2, when the cluster is started close to the cert expiry date (I tried a few days before), the certificates will be automatically renewed a few minutes after the cluster starts, so we no longer need to warn the user about it. This fixes crc-org#848
OpenShift 4.2 will automatically regenerate the certificates when they are close to expire. For example with the 1.1.0/4.2.2 release, the certs were initially valid until
Nov 29 08:35:04 2019 GMT
.When running
crc start
, the certs are renewed after just a few minutes for one more month:Dec 26 16:04:50 2019 GMT
.I check this using
openssl s_client api.crc.testing:6443 |openssl x509 --noout -dates
However, even with a certificate valid for one more month, when running
crc stop && crc start
, I'm still getting a warning that the certificates are about to expire.This is because the certificates used for api.crc.testing are coming from
/etc/kubernetes/static-pod-resources/kube-apiserver-certs/secrets/external-loadbalancer-serving-certkey/
while we check certificates from/var/lib/kubelet/pki/
The text was updated successfully, but these errors were encountered: