Hi everybody, I have a question if someone can hel...
# rke2
s
Hi everybody, I have a question if someone can help me. Yesterday i noticed an alert on rancher local cluster, v1.23.17+rke2r1 saying: " KubeClientCertificateExpiration A client certificate used to authenticate to kubernetes apiserver is expiring in less than 7.0 days. " As described in https://docs.rke2.io/advanced i restarted rke2-service on all nodes, and all certificates ( apart -ca certificates) where correctly updated on /var/lib/rancher/rke2/server/tls and will expire next year. Also the metric on prometheus that caused the alarms jumped to near to 0 "apiserver_client_certificate_expiration_seconds_count{job="apiserver"} > 0 and on (job) histogram_quantile(0.01, sum by (job, le) (rate(apiserver_client_certificate_expiration_seconds_bucket{job="apiserver"}[5m]))) < 604800"