mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-05-21 12:25:19 +00:00
Document K3s cert rotation
This commit is contained in:
@@ -8,6 +8,7 @@ aliases:
|
||||
|
||||
This section contains advanced information describing the different ways you can run and manage K3s:
|
||||
|
||||
- [Certificate rotation](#certificate-rotation)
|
||||
- [Auto-deploying manifests](#auto-deploying-manifests)
|
||||
- [Using Docker as the container runtime](#using-docker-as-the-container-runtime)
|
||||
- [Secrets Encryption Config (Experimental)](#secrets-encryption-config-experimental)
|
||||
@@ -19,6 +20,12 @@ This section contains advanced information describing the different ways you can
|
||||
- [Enabling legacy iptables on Raspbian Buster](#enabling-legacy-iptables-on-raspbian-buster)
|
||||
- [Experimental SELinux Support](#experimental-selinux-support)
|
||||
|
||||
# Certificate Rotation
|
||||
|
||||
By default, certificates in K3s expire in 12 months.
|
||||
|
||||
If the certificates are expired or have fewer than 90 days remaining before they expire, the certificates are rotated when K3s is restarted.
|
||||
|
||||
# Auto-Deploying Manifests
|
||||
|
||||
Any file found in `/var/lib/rancher/k3s/server/manifests` will automatically be deployed to Kubernetes in a manner similar to `kubectl apply`.
|
||||
|
||||
Reference in New Issue
Block a user