Hi, today updated my master’s certs because they were expired, now I see this

invalid bearer token, Token has been invalidated

all over the master’s logs. Do I need to do something on agent side other than restarting the

k3s-agent

?

When you say you update the certs, did you use the

k3s certificate

tool? Or did you just restart the k3s server node and the certs updated automatically (because they were within 30 days of expiration)?

I haven’t used the

k3s certificate

tool actually, just did a restart so this generated the new kubeconfig, which I’m using now to access k3s. But not sure if there are any extra steps that needs to be done on agent side other than restarting them too ?

Thats fine, by default you dont need to use the

k3s certificate

tool. You are correct there shouldn't be any other steps other than restarting the agents.

Did you generate the certs yourself, or is it the default certs K3s generates for you?

the certs were generated by k3s, thanks for the link I already tried it though 🙂 will try to upgrade to latest 1.21 and see if have more luck