This message was deleted.
# rke2
a
This message was deleted.
c
the certs for those components are managed by Rancher, so you have to initiate rotation from rancher. Newer versions of rancher will handle that properly I think. what version are you on?
h
2.7.10
I want to upgrade this week but want to get this (downstream) cluster in good state before upgrading rancher on rancher-local cluster
oh I see "Rotate certificates" in rancher UI when I click on the 3 vertical dots in cluster-management screen
c
yep
yeah you should be on 2.8 or 2.9
2.10 is about to come out and 2.8 will go EOL
h
thanks 🙏 yes I will upgrade to 2.8.3 then 2.9.3
that's the plan 🤞
"Rotate certificates" in rancher UI will work even though certs are already expired? they expired on Saturday
c
yep
wouldn’t be much good if you couldn’t rotate after they expired
h
thank you ! thank you! thank you! the downstream cluster is not in good state so I can upgrade rancher 🎉