From 396016406234e7a2eb261eb435a06f760528a22e Mon Sep 17 00:00:00 2001 From: alex Date: Thu, 27 Aug 2026 19:26:12 +0200 Subject: Document certificate renewal --- personal_infra/playbooks/roles/talos/README.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/personal_infra/playbooks/roles/talos/README.md b/personal_infra/playbooks/roles/talos/README.md index 38659334..467f0765 100644 --- a/personal_infra/playbooks/roles/talos/README.md +++ b/personal_infra/playbooks/roles/talos/README.md @@ -63,3 +63,18 @@ To update K8S: ``` $ talosctl upgrade-k8s --talosconfig talos/talosconfig-k8s-test.example --nodes k8s-test.example.com --to kubernetes.version ``` + +## Renewing certificates + +``` +$ talosctl ... +error checking Talos version compatibility: error getting server versions: rpc error: code = Unavailable desc = connection error: desc = "error reading server preface: remote error: tls: expired certificate" +``` + +``` +rye run ansible-vault decrypt talos/k8s-test.example-secrets.yaml +talosctl gen config --with-secrets talos/k8s-test.example-secrets.yaml --output-types talosconfig -o talosconfig k8s-test https://k8s-test.example.com +mv talosconfig talos/talosconfig-k8s-test +$EDITOR talos/talosconfig-k8s-test # add the endpoint +talosctl --talosconfig talos/talosconfig-k8s-test.example --nodes k8s-test.example.com kubeconfig +git checkout talos/k8s-test...secrets.yaml -- cgit v1.2.3