You can rotate all the cluster CA certs, but at this point you have no way of knowing what someone might have deployed to your cluster or nodes that they could use for persistent access.
b
big-dream-40414
06/17/2026, 2:55 PM
I don t want to delete my cluster. Can i rotate CA cert in my cluster
c
creamy-pencil-82913
06/17/2026, 3:51 PM
Yes. It is covered in the rke2 docs. But you cannot trust the cluster any longer... consider it compromised.
b
big-dream-40414
06/19/2026, 8:19 AM
i think create new kubeconfig is oke. And change CA cert