From f7f7bdc61a33a4aa05ac3149695ed6a15255a80c Mon Sep 17 00:00:00 2001 From: David Noland Date: Mon, 10 Jun 2019 18:09:37 -0700 Subject: [PATCH] Added warning that cert rotation may cause downtime. --- .../v2.x/en/cluster-admin/certificate-rotation/_index.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/rancher/v2.x/en/cluster-admin/certificate-rotation/_index.md b/content/rancher/v2.x/en/cluster-admin/certificate-rotation/_index.md index 74d52208d35..70617ae7199 100644 --- a/content/rancher/v2.x/en/cluster-admin/certificate-rotation/_index.md +++ b/content/rancher/v2.x/en/cluster-admin/certificate-rotation/_index.md @@ -3,6 +3,8 @@ title: Certificate Rotation weight: 2040 --- +> **Warning:** Rotating Kubernetes certificates may result in your cluster being temporarily unavailable as components are restarted. For production environments, it's recommended to perform this action during a maintenance window. + By default, Kubernetes clusters require certificates and Rancher launched Kubernetes clusters automatically generate certificates for the Kubernetes components. Rotating these certificates is important before the certificates expire as well as if a certificate is compromised. After the certificates are rotated, the Kubernetes components are automatically restarted. Certificates can be rotated for the following services: