diff --git a/doc/source/dist_cloud/kubernetes/orchestration-commands-for-dcmanager-4947f9fb9588.rst b/doc/source/dist_cloud/kubernetes/orchestration-commands-for-dcmanager-4947f9fb9588.rst index 15791a018..65a56bbca 100644 --- a/doc/source/dist_cloud/kubernetes/orchestration-commands-for-dcmanager-4947f9fb9588.rst +++ b/doc/source/dist_cloud/kubernetes/orchestration-commands-for-dcmanager-4947f9fb9588.rst @@ -6,8 +6,9 @@ Kubernetes Root CA Certificate Update for Distributed Cloud Orchestration .. warning:: - During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, and - ``statefulsets`` present in the cluster are rolling restarted. This impacts + During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, + and ``statefulsets`` present in the cluster are rolling restarted. If + updateStrategy is OnDelete, then its pods are deleted. This impacts services provided by the application. It is highly recommended to schedule a Kubernetes Root |CA| update during planned maintenance windows. diff --git a/doc/source/security/kubernetes/kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst b/doc/source/security/kubernetes/kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst index 7cd6006be..68fef3e66 100644 --- a/doc/source/security/kubernetes/kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst +++ b/doc/source/security/kubernetes/kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst @@ -19,8 +19,10 @@ either an uploaded certificate or an auto generated certificate. Special care should be taken when updating the Root |CA| certificate. .. warning:: - During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, and - ``statefulsets`` present in the cluster are rolling restarted. This impacts + + During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, + and ``statefulsets`` present in the cluster are rolling restarted. If + updateStrategy is OnDelete, then its pods are deleted. This impacts services provided by the application. It is highly recommended to schedule a Kubernetes Root |CA| update during planned maintenance windows. diff --git a/doc/source/security/kubernetes/manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst b/doc/source/security/kubernetes/manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst index 33550bc37..0ce34a514 100644 --- a/doc/source/security/kubernetes/manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst +++ b/doc/source/security/kubernetes/manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst @@ -15,6 +15,7 @@ certain order and phases, with most of the commands to be executed host by host. .. warning:: + Do **not** let the Kubernetes Root |CA| certificate expire on your system and ensure that certificates with valid/adequate expiry dates are used during renewal as there is no easy way to recover a system if the @@ -23,8 +24,10 @@ host. Special care should be taken when updating the Root |CA| certificate. .. warning:: - During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, and - ``statefulsets`` present in the cluster are rolling restarted. This impacts + + During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, + and ``statefulsets`` present in the cluster are rolling restarted. If + updateStrategy is OnDelete, then its pods are deleted. This impacts services provided by the application. It is highly recommended to schedule a Kubernetes Root |CA| update during planned maintenance windows.