How to check k8s certificate expiration?

All about k0s
#1

Hey all, how do I check when k8s certificates in a k0s cluster will expire?
I tried using kube admin, but I don’t know if it’s the best way.

#2

One way is with the standard openssl tooling:

openssl x509 -in /var/lib/k0s/pki/server.crt -text -noout

The serving certs are generated with 1 year validity, k0s will renew them at every restart (reboot, upgrade etc. cases)

1 Like
#3

Hi, @jnummelin

Can you explain or send me a link to a document where I can find out how k0s manages the cluster’s certificates?

Thanks in advance. :+1: