https://rancher.com/ logo
Join Slack
Powered by
This message was deleted.
# k3s
a
This message was deleted.
l
Maybe start using 
--tls-san
and then use 
k3s certificate rotate
?
c
just add it to --tls-san and then make a request against the hostname. it’ll get added on demand, if approved.
l
Oh nice. What is responsible for approving it?
c
k3s
it will add hostnames to the cert on demand, if they match a node IP, hostname, or a value in the tls-san list
l
Oh I see, okay
It'll be approved by my adding it to tls-san, same page now
That's handy, thank you! It's not explicitly called out, but some online discussions led me to believe 
--tls-san
was mostly a bootstrapping arg
Happy to learn it's not. Thanks @creamy-pencil-82913 🙂
Open in Slack
PreviousNext
Powered by