Auto rotate the k8s cert
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 2.7k
- Forks
- 554
- Avg merge
- 20h 42m
- Merged PRs (30d)
- 14
Description
Related to #5334
The k8s cert will expire every year, we have a feature to check the cert's expiration, but admin still need to renew manually.
The kubelet has certificate rotation feature, maybe we can use it or some scripts to rotate the certs.
Configure Certificate Rotation for the Kubelet
Related comments:
https://github.com/microsoft/pai/pull/5434#issuecomment-823898310
https://github.com/microsoft/pai/pull/5409#issuecomment-824868389
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with related issue #5334, the existing certificate-expiration check, and Kubernetes' Configure Certificate Rotation for the Kubelet guide. Compare kubelet rotation with the script-based alternative referenced in the issue and determine the certificate renewal flow. Done means Kubernetes certificates rotate automatically before expiry and the existing expiration check confirms the result.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100