kubeone icon indicating copy to clipboard operation
kubeone copied to clipboard
verified publisher icon kubermatic

Automating CA certificate rotation

Open csengerszabo opened this issue 3 years ago • 0 comments

Description of the feature you would like to add / User story

As a KubeOne cluster admin I would like to rotate the CA certificates in an automated way in order not to do risky manual process.

Solution details

  • A CLI feature in KubeOne that does a rotation of CA certificates in a fully automated way without human interaction

Alternative approaches

  • Using a VPN or reverse proxy to control admission to the cluster with an external wall
  • Manual rotation of CA certificates in Kubernetes. But it is risky, as many things could go wrong.

Use cases

  • Colleague leaves the company and we'd like to ensure if they won't reach the cluster anymore.

Additional information

csengerszabo avatar Jul 20 '22 11:07 csengerszabo