Updating SSL/TLS Certificate

Updating SSL/TLS Certificate

If you've already gone through the setup process once, and you want to upload new TLS certificates, you must run this command to restore the ability to upload new TLS certificates:

kubectl -n default annotate secret kotsadm-tls acceptAnonymousUploads=1 --overwrite

From there, you can navigate to <host>:8800/tls to re-apply a TLS certificate.

Once complete, don’t forget to disable Anonymous Uploads again:

kubectl -n default annotate secret kotsadm-tls acceptAnonymousUploads=0 --overwrite

More info can be found in Kurl Documentation - https://kurl.sh/docs/install-with-kurl/setup-tls-certs#uploading-new-tls-certs