TKGm control plane nodes redeploy automatically during standard certificate renewal process

Products

• VMware Tanzu Kubernetes Grid Management

Issue/Introduction

• TKGm Kubernetes controllers experience automatic redeployment.
• This behavior not impacts application pod performance stability during the control plane update cycle.

Environment

TKGm 2.5.x

Cause

TKGm control plane nodes are redeployed by design as part of the automated certificate renewal workflow.

Resolution

• Monitor the TKGm cluster during the certificate renewal window to anticipate control plane node cycling.
• Verify that application workloads are configured with appropriate Pod Disruption Budgets (PDBs) and replicas to maintain availability during node redeployments.
• If network-level anomalies are suspected during this process, perform a separate validation of the network layer, as this is external to the TKGm certificate renewal logic.

Additional Information

Refer article TKGm Certificate Rotation - Control Plane Nodes for manual certificate rotation and more details.