diff options
| author | alex <alex@pdp7.net> | 2026-08-27 19:26:12 +0200 |
|---|---|---|
| committer | alex <alex@pdp7.net> | 2026-08-27 19:26:12 +0200 |
| commit | 396016406234e7a2eb261eb435a06f760528a22e (patch) | |
| tree | 6757f1f22857c3909d0fde1ed6c223ed1f1bd038 | |
| parent | 72d277227a00af1dd9d894d4a2a663b8e964ce17 (diff) | |
Document certificate renewal
| -rw-r--r-- | personal_infra/playbooks/roles/talos/README.md | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/personal_infra/playbooks/roles/talos/README.md b/personal_infra/playbooks/roles/talos/README.md index 38659334..467f0765 100644 --- a/personal_infra/playbooks/roles/talos/README.md +++ b/personal_infra/playbooks/roles/talos/README.md @@ -63,3 +63,18 @@ To update K8S: ``` $ talosctl upgrade-k8s --talosconfig talos/talosconfig-k8s-test.example --nodes k8s-test.example.com --to kubernetes.version ``` + +## Renewing certificates + +``` +$ talosctl ... +error checking Talos version compatibility: error getting server versions: rpc error: code = Unavailable desc = connection error: desc = "error reading server preface: remote error: tls: expired certificate" +``` + +``` +rye run ansible-vault decrypt talos/k8s-test.example-secrets.yaml +talosctl gen config --with-secrets talos/k8s-test.example-secrets.yaml --output-types talosconfig -o talosconfig k8s-test https://k8s-test.example.com +mv talosconfig talos/talosconfig-k8s-test +$EDITOR talos/talosconfig-k8s-test # add the endpoint +talosctl --talosconfig talos/talosconfig-k8s-test.example --nodes k8s-test.example.com kubeconfig +git checkout talos/k8s-test...secrets.yaml |