public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 12:38:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update _index.md

Browse Source
This commit is contained in:
Denise
2019-03-22 10:23:26 -07:00
committed by Denise Schannon
parent d78f25ee12
commit 3e579cd92a
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rke/v0.1.x/en/cert-mgmt/_index.md
+7 -5
View File
@@ -80,7 +80,13 @@ INFO[0033] [worker] Successfully restarted Worker Plane..
### Rotating the CA and all service certificates
If the CA needs to be rotated, you are required to rotate all the services certificates as they need to be signed with the newly rotated CA. To include rotating the CA with the service certificates, add the `--rotate-ca` option. After the the CA and all the service certificates are rotated, these services will automatically be restarted to start using the new certificate.
If the CA certificate needs to be rotated, you are required to rotate all the services certificates as they need to be signed with the newly rotated CA certificate. To include rotating the CA with the service certificates, add the `--rotate-ca` option. After the the CA and all the service certificates are rotated, these services will automatically be restarted to start using the new certificate.
Rotating the CA certificate will result in restarting other system pods, that will also use the new CA certificate. This includes:
- Networking pods (canal, calico, flannel, and weave)
- Ingress Controller pods
- KubeDNS pods
```
$ rke cert rotate --rotate-ca
@@ -102,8 +108,4 @@ INFO[0001] Successfully Deployed state file at [./cluster.rkestate]
INFO[0001] Rebuilding Kubernetes cluster with rotated certificates
```
Rotating the CA certificate will also result in restarting some system pods to use the new CA certificate, this includes:
- Networking pods (canal, calico, flannel, and weave).
- Ingress Controller pods.
- KubeDNS pods.