Serving-cert on AKS Cluster has expired

1

Hello,

We are managing AKS Cluster using the Rancher and it was working fine until today. We are getting the below error

2021/04/08 11:59:27 [INFO] Waiting for server to become available: Get https://127.0.0.1:6443/version?timeout=30s: x509: certificate has expired or is not yet valid
2021-04-08 11:59:27.634535 I | http: TLS handshake error from 127.0.0.1:34410: remote error: tls: bad certificate

I have found that serving-cert has expired on the kube-system namespace. I have used below commands to verify that.

$ kubectl -n kube-system get secrets serving-cert -o yaml
$ echo -n LS0tLS1CRUdJTiBFQyB******| base64 -d > serving-cert-tls.crt
$ openssl x509 -enddate -noout -in serving-cert-tls.crt
output
notAfter=Apr 7 13:24:25 2021 GMT

This cluster was created manually on the Azure and then imported on to the Rancher.
Rancher Version - v2.4.2 (9afe68b83)

Could you please help me to rotate the keys?

2

Did you find a solution ?`Same problem here… at least everything is still running.

3

I did not find any solution.

4

maybe someone answers there