31.2 Updating the CDF CA

You can update your own CA or newly generated CA by performing the following:

  1. Log in to the master node.

  2. Change to the directory:

    cd /root/ca

  3. Update the CA by executing the following command:

    ${K8S_HOME}/scripts/cdf-updateRE.sh write --re-key=private/ca.key.pem --re-crt=certs/ca.cert.pem --re-ca=certs/ca.cert.pem

  4. To verify, read the CDF CA file by executing the following command and ensure that it is same as the ca.cert.pem file. You must execute the following command on the initial master node.

    ${K8S_HOME}/scripts/cdf-updateRE.sh read