hello, I have just run to an issue and would like to get your opinions of possible solutions. Seems that my tls-rancher-ingress cert has expired as shown on following screen, What is recommended way of cert renewal in this situation? Unfortunatelly I cannot issue any

helm

commands on host as it gives me info Error: UPGRADE FAILED: Kubernetes cluster unreachable: the server has asked for the client to provide credentials` which I believe is related to the outdated cert.

can you run kubectl on the cluster?

I can run kubectl so thanks for pointing that out but as far as I rember I have installed rancher using

ingress.tls.source=letsEncrypt

switch so in that case are`--cert=tls.crt --key=tls.key` switches from Your suggestion still valid?

Probably not... I do not use lets encrypt

Indeed, I do use cert-manager and seems that

cert-manager-webhook

does not have min availability due to:

Failed to generate serving certificate, retrying..." err="internal error: CA certificate has expired, try again later

- any ideas how this CA can be renewed?

you might be able to delete content out of the cert-manager namespace and then re-rollout the cert-manager deployment?

# del
kubectl delete secret -n cert-manager <secret-name>
kubectl delete certificate -n cert-manager <your-cert-name>
kubectl delete order -n cert-manager --all
kubectl delete challenge -n cert-manager --all
kubectl delete pod -n cert-manager --all

# rollout
kubectl rollout restart deployment -n cert-manager

will try to do that later on and will post results, thanks for directions and feedback 😄