canonical / canonical/microcloud

Add command to rotate cluster certificates

Open
#1,453 0 comments 0 reactions 0 assignees View on GitHub
Bug Jira
Dominant language
Go
Stars
532
Forks
83
Avg merge
1d 14h
Merged PRs (30d)
36

Description

Microcluster already exposes the possibility to rotate the cluster certificate. However there is no command you can run directly in MicroCloud to trigger the rotation across all Micro* components and LXD.

Add a `microcloud cluster update-certificate` command that will trigger cluster certificate rotation.
Furthermore update the decommission guide to instead run this command (not only `lxc cluster update-certificate`).

That was identified whilst reviewing https://github.com/canonical/microcloud/pull/1450.

Contributor guide

Open the contributing guide

Research direction

Locate the existing Microcluster certificate-rotation entry point and the decommission guide. Add the `microcloud cluster update-certificate` command so it triggers rotation across all Micro* components and LXD, then update the guide to use it instead of only `lxc cluster update-certificate`.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, documentation
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
65/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.