19.1 Renewing Certificates Before Expiration

You can renew both internal and external certificates before expiration.

To renew certificates before expiration:

  1. Log in to the master node.

  2. Change to the following directory:

    cd <k8s_HOME>

    By default, k8s_HOME is /opt/kubernetes.

  3. (Conditional) For internal certificates, run the following command to generate new certificates:

    ./scripts/renewCert --renew -t internal

    In a multi-node deployment, executing the above command automatically distributes the new certificates to all nodes in the cluster.

  4. (Conditional) For external certificates, run the following command to generate new certificates:

    ./scripts/renewCert --renew -t external