Hi everybody, I have a question if someone can help me.
Yesterday i noticed an alert on rancher local cluster, v1.23.17+rke2r1 saying:
" KubeClientCertificateExpiration A client certificate used to authenticate to kubernetes apiserver is expiring in less than 7.0 days. "
As described in
https://docs.rke2.io/advanced i restarted rke2-service on all nodes, and all certificates ( apart -ca certificates) where correctly updated on /var/lib/rancher/rke2/server/tls and will expire next year.
Also the metric on prometheus that caused the alarms jumped to near to 0
"apiserver_client_certificate_expiration_seconds_count{job="apiserver"} > 0 and on (job) histogram_quantile(0.01, sum by (job, le) (rate(apiserver_client_certificate_expiration_seconds_bucket{job="apiserver"}[5m]))) < 604800"