This message was deleted.

to clarify we don't use kubeconfigs which Rancher provides by default - because they point to Rancher endpoint. So we use kubeconfig generated in

/etc/rancher/rke2/rke2.yaml

and updating server endpoint to HA IP. It is basically done by terraform during cluster deployment, but this is not the question 🙂 the question is there any possibility to trigger something on certificate rotation event in Rancher?

Through the UI? I don't think so. You can probably trigger an event by exporting the cluster logs and triggering an event that way.