How to Check Certificate Expiry of the certificates deployed by Platform9 Managed Kubernetes?

Problem

How do I check the certificate expiry date of the certificates deployed by Platform9 Managed Kubernetes?

Environment

• Platform9 Managed Kubernetes - All Versions
• TLS

Answer

The openssl command may be used within the /etc/pf9/kube.d/certs directory of each deployed node, e.g.

xxxxxxxxxx

# find /etc/pf9/kube.d/certs -name '*.crt' -print -exec openssl x509 -in {} -noout -enddate \;

/etc/pf9/kube.d/certs/kube-controller-manager/apiserver/request.crt

notAfter=Jul 25 17:20:07 2025 GMT

...