3.2. Reissuing internal certificates for secured clusters

Procedure

1. Choose the appropriate method to generate an init bundle:

   • To generate an init bundle by using the user interface (UI), perform the following steps:

     1. In the RHACS portal, click Platform Configuration Clusters.
     2. Click Init bundles.
     3. To create a new init bundle, click Create bundle.
     4. Enter a name for the cluster init bundle.

     5. Choose the appropriate platform of the secured clusters:

        The following values are associated with the platform of the secured clusters:

        • OpenShift
        • EKS
        • AKS
        • GKE

     6. Choose the appropriate installation method for the secured cluster services from the drop-down list:

        The following values are associated with the installation method for the secured cluster services:

        • Operator (recommended)
        • Helm chart

     7. Click Download.

        重要

        You can only download the YAML file once when you create an init bundle. Store the YAML file securely because it contains secrets.

   • To generate an init bundle by using the roxctl CLI, run the following command:

     $ roxctl -e <endpoint> -p <admin_password> central \
       init-bundles generate --output-secrets <bundle_name> \
       init-bundle.yaml

2. To create the necessary resources on each secured cluster, run the following command:

   $ oc -n stackrox apply -f <init-bundle.yaml>

Procedure

1. In the RHACS portal, click Platform Configuration Clusters.
2. Select a cluster to view its details.

3. From the cluster details panel, select the link to Apply credentials by using an automatic upgrade.

   注記

   When you apply an automatic upgrade, Red Hat Advanced Cluster Security for Kubernetes (RHACS) creates new credentials in the selected cluster. However, you continue to see a notification. The notification disappears when each RHACS service uses the new credentials after the service restarts.