TKGm Certificate Rotation Guide

Products

• Tanzu Kubernetes Runtime
• VMware Tanzu Kubernetes Grid

Issue/Introduction

This KB provides guidance on TKGm certificate management. 

Please note that this has not been tested on all TKGm versions and does not cover every certificate.

Environment

TKGm v2.x.x.

Resolution

Target Certificate	Solution
Control-plane node (Management + Workload Cluster)	https://knowledge.broadcom.com/external/article/418484 Official - Manage Cluster Secrets
Tanzu CLI	https://knowledge.broadcom.com/external/article/418495
kubectl context	https://knowledge.broadcom.com/external/article/418495
AKO	Official - Modify the Avi Controller Certificates https://knowledge.broadcom.com/external/article/345690
TKG_CUSTOM_IMAGE_REPOSITORY	Classy Cluster: https://knowledge.broadcom.com/external/article/313137 Legacy Cluster: https://knowledge.broadcom.com/external/article/323913
ADDITIONAL_IMAGE_REGISTRY	https://knowledge.broadcom.com/external/article/323913
VSPHERE_TLS_THUMBPRINT	TKGm v2.3.x and newer: https://knowledge.broadcom.com/external/article/373844 Prior to TKGm v2.3.x : https://knowledge.broadcom.com/external/article/337406
kubelet in Worker node (deprecated)	https://knowledge.broadcom.com/external/article/342295
Standard Package - Contour/Envoy	https://knowledge.broadcom.com/external/article/316952
Standard Package - Whereabouts	https://knowledge.broadcom.com/external/article/369897