Live at #KubeCon: I am rotating @kubernetes.dev's main CI workload cluster certs before they expire 🙃 Thanks to github.com/upodroid for preparing with the switch to DNS endpoint and rotating the other CI clusters. - ThreadSky

About ThreadSky

bentheelder.bsky.social • 54 days ago

Live at #KubeCon: I am rotating @kubernetes.dev's main CI workload cluster certs before they expire 🙃

Thanks to https://github.com/upodroid for preparing with the switch to DNS endpoint and rotating the other CI clusters.

Comments

vbatts.hashbangbash.com•54 days ago

🫠

bentheelder.bsky.social•54 days ago

It's going smoothly but we have the usual "there's never really a great time to do a potentially disruptive maintenance task with a global contributor base" => huh the deadline to deal with this is approaching ...

vbatts.hashbangbash.com•54 days ago

Like other things in life, it's not always which solution you like the most, but which solution you dislike the least

marypcbuk.bsky.social•54 days ago

What’s the cert lifecycle? Hopefully not 90 days!

bentheelder.bsky.social•54 days ago

It's GKE, we've just been running some of these a long time:
https://cloud.google.com/kubernetes-engine/docs/how-to/credential-rotation#credential-lifetime

bentheelder.bsky.social•54 days ago

Previously the one that ran in https://Google.com instead of the community/CNCF managed https://kubernetes.io GCP org was upgraded in place since GKE 1.4 until late last year ... it started with ABAC 😁

jeffreyhulten.com•54 days ago

Did you do it live on stage? That would be next level...

bentheelder.bsky.social•54 days ago

lol I wish, live from the hotel 😂

jeffreyhulten.com•53 days ago

Next time, small room party...

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply