SKS certificates and API keys
Several certificates authorities are generated when a cluster is created. You can retrieve the public certificate for some of these authorities by using the
exo sks authority-cert <CLUSTER-NAME|ID> <AUTHORITY> CLI command.
The authorities are:
kubelet: the authority generating certificates for the Kubelet daemon running on the workers.
aggregation: the authority used by the aggregation layer.
CCM API key
The Exoscale Cloud Controller Manager (CCM) needs an IAM key to work. This key is automatically created on your account when you create a cluster. Its description is
sks-cluster-<cluster-id>. The key will be automatically deleted if the cluster is deleted.
If you want to regenerate this key (for example, you deleted it by mistake and want to recreate it), you can do it using the
exo sks rotate-ccm-credentials <CLUSTER-NAME|ID> CLI command.