public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-14 21:14:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added new page for webhook expiration issue

Browse Source
This commit is contained in:
Jennifer Travinski
2021-10-29 17:18:41 -04:00
parent a740c97919
commit d08fe64710
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.6/en/troubleshooting/expired-webhook-certificates/_index.md
+22
View File
@@ -0,0 +1,22 @@
---
title: Rotation of Expired Webhook Certificates
weight: 120
---
For Rancher versions that have `rancher-webhook` installed, these certificates will expire after one year. It will be necessary for you to rotate your webhook certificate when this occurs.
Rancher will advise the community once there is a permanent solution in place for this known issue. Currently, there are two methods to work around this issue:
##### 1. Users with cluster access, run the following commands:
```
kubectl delete secret -n cattle-system cattle-webhook-tls
kubectl delete pod -n cattle-system -l app=rancher-webhook
```
##### 2. Users with no cluster access via `kubectl`
1. Delete the `cattle-webhook-tls` secret in the `cattle-system` namespace in the local cluster.
1. Delete the `rancher-webhook` pod in the `cattle-system` namespace in the local cluster.
> **Note:** The webhook certificate expiration issue is not specific to `cattle-webhook-tls` as listed in the examples. You will fill in your expired certificate secret accordingly.