...
Typha watches for changes in various resources, and does a fan-out to all calico-nodes, reducing the load on the Kubernetes API server.
Renewing Certificates
It is possible to renew all Kubernetes certificates using Kubeadm. The command below uses Certificate Authority (CA) to renew certificates stored in /etc/kubernetes/pki directory on each node in the cluster.
| Code Block | ||
|---|---|---|
| ||
kubeadm certs renew |
| Warning |
|---|
It's important to know that even after certificate renewal, any unexpired certificate that was produced previously can still be used unless CA is changed. |