Renew Kubernetes Certificate

Internal Kubernetes certificates have a one-year expiration date and must be renewed to ensure continuing secure functioning within the cluster.

OVERVIEW

Internal Kubernetes certificates are good for one year. Failure to renew them before they expire may result in an error, preventing secure communication and potentially affecting the operation of Kubernetes cluster applications and services.

In system-tests, we are using Kubernetes based deployment on single node cluster on seven individual servers.

The links for are : dev-[1:9].devnet-0chain.net

Example :

• dev-1.devnet-0chain.net

• grafana.dev-1.devnet-0chain.net

• rancher.dev-1.devnet-0chain.net

• 0box.dev-1.devnet-0chain.net

If you see an error message suggesting the requirement for Kubernetes cluster renewal, it means your certificates are expired or invalid, and you need to renew them right now to maintain secure and uninterrupted cluster operations.

Error: Kubernetes cluster unreachable: Get https://X.X.X.X:6443/version?timeout=32s: x509: certificate has expired or is not yet valid296E0415 21:20:40.572581 3165 memcache.go:265] couldn't get current server API group list: Get "https://X.X.X.X:6443/api?timeout=32s": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2023-04-15T21:20:40+02:00 is after 2023-04-14T17:04:06Z