March 2020
Intermediate to advanced
626 pages
14h 45m
English
We show here the steps required to regenerate and rotate the identity certificates. This process uses the same root certificate created earlier. Note that updating of the root certificate requires a reinstall of the Linkerd control plane:
$ kubectl -n step exec -t step-0 -- step certificate create identity.linkerd.cluster.local identity.crt identity.key --profile intermediate-ca --ca ./root-ca.crt --ca-key ./root-ca.key --no-password --insecure --force$ kubectl -n step cp step-0:identity.crt /tmp/identity.crt$ kubectl -n step cp step-0:identity.key /tmp/identity.key
$ kubectl -n linkerd delete secret linkerd-identity-issuer ...
Read now
Unlock full access