capabilities.work

Rotate Cluster Certificates

A 3-step recipe with Azure Kubernetes Service. We can help you get access.

Recipe · 3 steps

Rotate Cluster Certificates

with Azure Kubernetes Service · IT Infrastructure Management

Rotate AKS cluster certificates, wait for completion, and pull refreshed user credentials.

  1. Trigger certificate rotation. AKS accepts the request asynchronously and returns 202 Accepted.
  2. Read the cluster and inspect provisioningState. While it is still Updating the flow loops back to this step; once it reports Succeeded the flow advances to refresh credentials.
  3. List the cluster user credentials. The response carries a kubeconfigs array whose first entry holds the refreshed base64-encoded kubeconfig.
What you'll need to have ready
  • subscriptionId: The ID of the target subscription (valid UUID).
  • resourceGroupName: The name of the resource group.
  • resourceName: The name of the managed cluster.
  • apiVersion: The AKS REST API version to use.
  • accessToken: An Azure AD bearer token with user_impersonation scope.
For your developer

Arazzo workflow microsoft-azure-kubernetes-service:rotate-certificates-and-refresh-credentials, 3 operations: ManagedClusters_RotateClusterCertificates → ManagedClusters_Get → ManagedClusters_ListClusterUserCredentials. Specs on APIs.io.

More recipes with Azure Kubernetes Service

Add Node Pool and PollDelete Node Pool MachinesProvision Cluster and Fetch CredentialsRun Command on ClusterScale Node PoolStart ClusterStop ClusterUpgrade Cluster Control PlaneUpgrade Node Pool Image