Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,461 questions
I have created a cluster issuer for tls certificate (lets encrypt)in my aks cluster how to know if the certificates gets auto renewed or not
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 74%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Abhishek Singh
381
Reputation points
I have created a cluster issuer for tls certificate (lets encrypt)in my aks cluster how to know if the certificates gets auto renewed or not
Is there any process to enable auto renewal or check if it's already done.
I have installed cert manager using helm.
Azure Kubernetes Service
{count} votes
-
Ravi Kanth Koppala 3,391 Reputation points Microsoft Employee Moderator2022-12-18T06:26:39.58+00:00 @Abhishek Singh ,
To know if the TLS certificates in your Azure Kubernetes Service (AKS) cluster are being automatically renewed, you can check the status of the certificate issuer you created. If the issuer is set up to renew the certificates automatically, it will have a status of "Ready."You can check the status of the certificate issuer by running the following command:
kubectl describe clusterissuer [issuer-name]Replace [issuer-name] with the name of the certificate issuer that you created.
You can also check the expiration date of the TLS certificates in your AKS cluster by running the following command:
kubectl get certificates --all-namespacesThis command will list all of the TLS certificates in your AKS cluster and their expiration dates. If the certificates are being automatically renewed, their expiration dates should be in the future.
If you are using the Let's Encrypt certificate issuer, it is essential to note that it is only valid for 90 days. The certificate issuer will automatically renew the certificates before they expire to ensure that your AKS cluster continues to have valid TLS certificates.
I hope this helps! Let me know if you have any other questions.
-
Eddie Neto 1,251 Reputation points Microsoft Employee2022-12-20T09:33:30+00:00 If you are using cert-manager to manage the certificates they take care automatically to you and manages when will get expired and generate a new one without your intervention.
https://cert-manager.io/docs/installation/helm/#4-install-cert-manager
In my lab I have one...screenshot below. Hope this helps. Please "Accept as Answer" if it helped, so that it can help others in the community looking for help on similar topics
Sign in to comment
Sign in to answer