you cannot invalidate certificates in Kubernetes. It does not do CRL checking. You will need to do a complete replacement of the cluster root CAs to invalidate the certificate.
creamy-pencil-82913
12/06/2025, 6:55 PM
This is why you should use something like Rancher to manage users - it creates unique RBAC for each user. RBAC can be deleted when you want to terminate the account.
creamy-pencil-82913
12/06/2025, 6:57 PM
If you just delete those files, they will come back - they are synced with the datastore. See the CA rotation docs on the website.