After creating a workload cluster, you can check its overview, download the Kubeconfig file, edit the K8s cluster configuration, manage the nodes, and manage the workloads.
Note:
- The control plane certificates for workload clusters are stored in and maintained by each control plane node independently. The certificates are valid for 1 year by default, after which the workload cluster will no longer be available.
- The certificate validity period is calculated from the date the control plane node is created. When there are 30 days remaining before the control plane certificate expires, the system will automatically perform rolling updates on the control plane nodes to renew the certificates. During this process, ensure that there are IP addresses that are not in use in the workload cluster IP pools. During certificate renewal, there may be about 15 seconds of connection loss to the workload cluster. To avoid this impact, you can follow either of the methods below:
- When the control plane certificate has more than 30 days remaining before expiration, you can manually replace all control plane nodes at an appropriate time to renew the certificate.
- Perform a scheduled upgrade of the workload cluster each year to rebuild the control plane nodes and refresh the control plane certificate expiration time.
