k3s-io / k3s

Lightweight Kubernetes
https://k3s.io
Apache License 2.0
26.62k stars 2.24k forks source link

Understand k3s certificate rotation #10021

Closed happyhunter7 closed 3 weeks ago

happyhunter7 commented 3 weeks ago

I've been reading the documentation for the certificate rotation And few things are unclear to me, and mostly about https://docs.k3s.io/cli/certificate. Client and Server certificate rotation, which expires after 1 year after issuance

So in the docs is said that in order to rotate the certs we have to

systemctl stop k3s
k3s certificate rotate
systemctl start k3s