public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-05-22 12:55:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update _index.md

Browse Source
This commit is contained in:
Alena Prokharchyk
2019-03-12 14:31:43 -07:00
committed by Denise Schannon
parent ac5227e111
commit cf1c8cbff6
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/cluster-provisioning/rke-clusters/certificate-rotation/_index.md
+4 -4
View File
@@ -17,7 +17,7 @@ To rotate certificates for your cluster, open the **Global** view, make sure the
### Certificate rotation for all components
To rotate certificates for all kubernetes components including:
Certificates can be rotated for the following kubernetes cluster components:
- Kube-apiserver
- Kube-scheduler
@@ -28,11 +28,11 @@ To rotate certificates for all kubernetes components including:
Select **Rotate all Service certificates (keep the same CA)** to rotate all certificates mentioned above
### Certificate rotation for specific component
### Certificate rotation for a specific component
To rotate certificates for only one or more component you can select **Rotate an individual service** and then select one of the components from the drop down menu, this will result in rotating certificate for only this component.
To rotate certificates for one of the components, expand **Rotate an individual service** and select one of the components from the drop down menu. It will result in rotating certificate for only this component.
### Certificate rotation for CA
To rotate Kubernetes CA certificate you can select **Rotate the CA and all Service certificates** option, note that rotating this certificate will trigger rotating all components certificates as well to be signed with the new rotated CA.
To rotate Kubernetes CA certificate, select **Rotate the CA and all Service certificates** option. Note that rotating this certificate will trigger rotating all components' certificates as they need to be signed with the new rotated CA.