Chapter 4. Control plane certificates
Location
Control plane certificates are included in these namespaces:
- openshift-config-managed
- openshift-kube-apiserver
- openshift-kube-apiserver-operator
- openshift-kube-controller-manager
- openshift-kube-controller-manager-operator
- openshift-kube-scheduler
Management
Control plane certificates are managed by the system and rotated automatically.
In the rare case that your control plane certificates expired, see Recovering from expired control plane certificates
Additional resources
- Manually rotate service serving certificates
- Securing service traffic using service serving certificate secrets
- Recovering from expired control plane certificates
- Configuring the cluster-wide proxy
- Adding API server certificates
- Replacing the default ingress certificate
- Working with nodes
- Recovering from lost master hosts
