public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-30 15:04:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add missing steps for recovering from cert expiration (#3712)

Browse Source 
* Improve instructions on cert expiration

Add instructions for deleting the mutating webhook

* Update content/rancher/v2.6/en/troubleshooting/expired-webhook-certificates/_index.md

Co-authored-by: Caleb Bron <cbron@users.noreply.github.com>

Co-authored-by: Caleb Bron <cbron@users.noreply.github.com>
This commit is contained in:
Anton Lindholm
2021-12-07 16:48:58 -08:00
committed by GitHub
co-authored by Caleb Bron
parent 0a14a421bd
commit 16bdbc7c6e
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.6/en/troubleshooting/expired-webhook-certificates/_index.md
+5 -2
View File
@@ -10,6 +10,7 @@ Rancher will advise the community once there is a permanent solution in place fo
##### 1. Users with cluster access, run the following commands: ##### 1. Users with cluster access, run the following commands:
``` ```
kubectl delete secret -n cattle-system cattle-webhook-tls kubectl delete secret -n cattle-system cattle-webhook-tls
kubectl delete mutatingwebhookconfigurations.admissionregistration.k8s.io --ignore-not-found=true rancher.cattle.io
kubectl delete pod -n cattle-system -l app=rancher-webhook kubectl delete pod -n cattle-system -l app=rancher-webhook
``` ```
@@ -17,6 +18,8 @@ kubectl delete pod -n cattle-system -l app=rancher-webhook
1. Delete the `cattle-webhook-tls` secret in the `cattle-system` namespace in the local cluster. 1. Delete the `cattle-webhook-tls` secret in the `cattle-system` namespace in the local cluster.
1. Delete the `rancher-webhook` pod in the `cattle-system` namespace in the local cluster. 2. Delete the `rancher.cattle.io` mutating webhook
**Note:** The webhook certificate expiration issue is not specific to `cattle-webhook-tls` as listed in the examples. You will fill in your expired certificate secret accordingly. 3. Delete the `rancher-webhook` pod in the `cattle-system` namespace in the local cluster.
**Note:** The webhook certificate expiration issue is not specific to `cattle-webhook-tls` as listed in the examples. You will fill in your expired certificate secret accordingly.