Marko Mudrinić
Marko Mudrinić
@embik Do you have some idea if this is some cloud provider or baremetal?
/remove-lifecycle stale
@kron4eg Can you write down steps how to come up with a setup where we can renew certificates? We can drop the refinement-needed label
/remove-lifecycle stale
/remove-lifecycle stale
/lifecycle frozen
I see two options: - Automatically decrypt Secrets upon disabling encryptionProviders - if not possible, warn users to manually decrypt Secrets and provide instructions for that
Also relevant to https://github.com/kubermatic/kubeone/discussions/3096
> This is in line with the Kubernetes version skew policy, because CP components can have a version skew of max 2 minors with Kubernetes 1.23.17. That's unfortunately more complicated....
> As you mentioned, the code of kubeadm 1.29 suggests that it will accept a skew of 1 minor (between kubelet and cp), but from version 1.25 a skew of...