This message was deleted.
# k3s
a
This message was deleted.
c
you cannot invalidate certificates in Kubernetes. It does not do CRL checking. You will need to do a complete replacement of the cluster root CAs to invalidate the certificate.
This is why you should use something like Rancher to manage users - it creates unique RBAC for each user. RBAC can be deleted when you want to terminate the account.
If you just delete those files, they will come back - they are synced with the datastore. See the CA rotation docs on the website.
b
Ok
Let me check