When will my cluster certificates expire?

This document (000020184) is provided subject to the disclaimer at the end of this document.

Situation

Question

I have a cluster which is displaying the message "This cluster has certs that are expiring or have expired". Is there any way to determine when the certs will expire?

Pre-requisites

Kubernetes clusters provisioned via the RKE, or Rancher launched Kubernetes clusters

Answer

Dates on when particular certificates will expire are located in the Rancher API.

To view them, from the "Clusters" page, click the three-dot menu on your cluster and "View in API" Scroll down or search for the section called "certificatesExpiration" There you can see the expiration date for each kubernetes component

FYI, as of Rancher 2.3.5, there is a known issue that old, removed nodes still appear in this list. This is cosmetic and won't affect your running cluster: https://github.com/rancher/rancher/issues/24333

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.