Does anyone know if harvester/rke2 automatically r...
# harvester
b
Does anyone know if harvester/rke2 automatically renews the multus cni SA token on disk? We recently had an outage where the token in /etc/cni/net.d/multus.d/multus.kubeconfig had expired. We potentially had a separate external network outage during this time which makes it hard to pin down the exact cause but reading https://github.com/kubernetes-sigs/kubespray/issues/12002 it suggests that the thin client (which I believe harvester uses) doesn't auto renew the token
it can be manually rotated by bouncing the multus pods but not sure if that is needed
related https://github.com/rancher/rke2/issues/3425 but that looks more like canal rather than multus