starlingx/docs
Code Issues Proposed changes

kube-root-ca-update strategy is failing for DX subcloud when rook-ceph is configured (r10,dsR10minor)

Browse Source 
Add information to a warning.

Closes-bug: 2111751

Change-Id: I16686d8b9dacc3ab8a981fc14ed75d36574feed0
Signed-off-by: Elisamara Aoki Gonçalves <elisamaraaoki.goncalves@windriver.com>
This commit is contained in:
Elisamara Aoki Gonçalves
2025-06-06 18:41:17 +00:00
parent c9f9f2809f
commit 24a3589fe9
3 changed files with 12 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
doc/source/dist_cloud/kubernetes/orchestration-commands-for-dcmanager-4947f9fb9588.rst
View File

@@ -6,8 +6,9 @@ Kubernetes Root CA Certificate Update for Distributed Cloud Orchestration
.. warning:: .. warning::
During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, and During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``,
``statefulsets`` present in the cluster are rolling restarted. This impacts and ``statefulsets`` present in the cluster are rolling restarted. If
updateStrategy is OnDelete, then its pods are deleted. This impacts
services provided by the application. It is highly recommended to schedule services provided by the application. It is highly recommended to schedule
a Kubernetes Root |CA| update during planned maintenance windows. a Kubernetes Root |CA| update during planned maintenance windows.

6
doc/source/security/kubernetes/kubernetes-root-ca-certificate-update-cloud-orchestration-a627f9d02d6d.rst
View File

@@ -19,8 +19,10 @@ either an uploaded certificate or an auto generated certificate.
Special care should be taken when updating the Root |CA| certificate. Special care should be taken when updating the Root |CA| certificate.
.. warning:: .. warning::
During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, and
``statefulsets`` present in the cluster are rolling restarted. This impacts During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``,
and ``statefulsets`` present in the cluster are rolling restarted. If
updateStrategy is OnDelete, then its pods are deleted. This impacts
services provided by the application. It is highly recommended to schedule services provided by the application. It is highly recommended to schedule
a Kubernetes Root |CA| update during planned maintenance windows. a Kubernetes Root |CA| update during planned maintenance windows.

7
doc/source/security/kubernetes/manual-kubernetes-root-ca-certificate-update-8e9df2cd7fb9.rst
View File

@@ -15,6 +15,7 @@ certain order and phases, with most of the commands to be executed host by
host. host.
.. warning:: .. warning::
Do **not** let the Kubernetes Root |CA| certificate expire on your system Do **not** let the Kubernetes Root |CA| certificate expire on your system
and ensure that certificates with valid/adequate expiry dates are used and ensure that certificates with valid/adequate expiry dates are used
during renewal as there is no easy way to recover a system if the during renewal as there is no easy way to recover a system if the
@@ -23,8 +24,10 @@ host.
Special care should be taken when updating the Root |CA| certificate. Special care should be taken when updating the Root |CA| certificate.
.. warning:: .. warning::
During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``, and
``statefulsets`` present in the cluster are rolling restarted. This impacts During the Kubernetes Root |CA| update, ``deployments``, ``daemonsets``,
and ``statefulsets`` present in the cluster are rolling restarted. If
updateStrategy is OnDelete, then its pods are deleted. This impacts
services provided by the application. It is highly recommended to schedule services provided by the application. It is highly recommended to schedule
a Kubernetes Root |CA| update during planned maintenance windows. a Kubernetes Root |CA| update during planned maintenance windows.