Walk through the wizard to install the certificate. Select the area of the Address Bar that says Certificate Invalid. Select Continue to this website (not recommended) if you trust the connection to the website. Note that this is a stripped version of the microsoft documentation for rotating Azure Kubernetes Service. Im reading your question at 0939BST on, which is 0839GMT, and it says you wrote the question some 9 hours ago. Be sure you know what you’re doing before performing these steps. Now run any command to make sure you've successfully rotated your cluster certificate and that you can access your cluster, for instance using this command: kubectl get pods Now update the certificate used by kubectl using this command: az aks get-credentials -g -n -overwrite-existing Then rotate the cluster using: az aks rotate-certs -g -n Once you've established that you need to rotate your certificate make sure you are running Azure CLI version 2.0.77 or later otherwise these commands wont work:įirst run this command to sign in to your AKS cluster: az aks get-credentials -g -n This will look something like this: Certificate Information: I followed the steps shown on the developers page (certificate, device, appID, provision, etc.), but I keep noticing that my iPhone Developer Certificate always has a status of 'This certificate is not yet valid' in the Keychain Manager. Now use a Certificate Decoder such as to get the human readable certificate information.

MIIE6DCCAtCgAwIBAgIQQnfmwJLP3QTBNiwZ26tikzANBgkqhkiG9w0BAQsFADAN What you'll get is your actual certificate which looks something like this: -BEGIN CERTIFICATE. kubectl config view -raw -o = '')].cluster.certificate-authority-data}'Ĭopy the base64 certificate data and decode it using. Run this commad to get your base64 encoded certificate data.

The full message may read, You attempted to reach, but the server presented a certificate that is not yet valid. This is due to your Windows calendar/clock is not set to the right time/date. How to read your current credentials expiration date: Google Chrome will display a message, The server’s security certificate is not yet valid. If you dont you will receive this error when you try to connect to a cluster: Unable to connect to the server: x509: certificate has expired or is not yet valid: current time T14:13:36+01:00 is after Today I was given the task to rotate an expired Azure Kubernetes Service (AKS) certificate for a client.Īs I am still not a Kubernetes ninja I though it would be a fun exercise to write as I learn, so I thought I would share the solution to this problem.Įvery once and a while certificates on the Azure Kubernetes Service need to be rotated.

Certificate is not yet valid