How to Check Certificate Expiry of the certificates deployed by Platform9 Managed Kubernetes?

Problem

How do I check the certificate expiry date of the certificates deployed by Platform9 Managed Kubernetes?

Environment

• Platform9 Managed Kubernetes - All Versions

• TLS

Answer

The openssl command may be used within the /etc/pf9/kube.d/certs directory of each deployed node, e.g.

Bash

# find /etc/pf9/kube.d/certs -name '*.crt' -print -exec openssl x509 -in {} -noout -enddate \;
/etc/pf9/kube.d/certs/kube-controller-manager/apiserver/request.crt
notAfter=Jul 25 17:20:07 2025 GMT
...