<p>I'm trying to follow this <a href="https://blog.inkubate.io/install-and-configure-a-multi-master-kubernetes-cluster-with-kubeadm/" rel="nofollow noreferrer">tutorial</a>.  </p>

<ol>
<li>What would be the advantage of generating the certs yourself instead of depending on kubeadm? </li>
<li>if you create the certs yourself, does the auto-rotation happens after setting up the cluster from kubeadm?</li>
</ol>

<p>Thanks!</p>

JuniorPenguin
<p>I am creating all the certs by myself, the reason behind that is</p>

<ol>
<li><p>The kubernetes cluster we use might not be updated every year, so we need certificates with longer expiry. Our applications doesn't support random docker restart and we are not accepting the kubeadm phase command to regenerate the certificates and restart the docker. Hence we created all the certificates with 5 years of expiry and provided it to kubeadm and it is working fine. Now, we don't have to worry about our certificate expiry every year.</p></li>
<li><p>No kubeadm doesn't provide the auto rotate facility of certificates, this is the reason we needed longer expiry of certificates in the first place.</p></li>
</ol>

<p>Hope this helps.</p>
