Expired certificate after 1 year, how to upgrade with unavailable Hetzner VM sizes?

[nmehlei]

Hey all,
I have the situation that I created a 3-node cluster with 2.0.8 in September last year with CX32 VM sizes.

Nowadays, these don't seem to be available anymore (for multiple months already, at least), neither are the similar ones. Because of that, I'm rather careful changing something for the cluster as re-creating it would be substantially (!) more expensive.

Given that, I seem to have lost access to the cluster - probably because the access certificate expired after a year. The applications itself continue to work (all services still reachable), but no new deployments and no kubectl. How would I best fix the access?

As I understand it, upgrading k3s version would rotate the certs anyway, yet that - to my knowledge - would require temporarily adding more nodes - which would not work as that VM size is no longer available.

Help would be greatly appreciated :) Thanks!

[vitobotta]

Hi, I really suggest you remove the old instance types by following this migration guide https://vitobotta.github.io/hetzner-k3s/Upgrading_a_cluster_from_1x_to_2x/. The guide was written for moving from the old v1.x version, but most of it will help you too if you still have the instance type in your instance names. After this migration, the instance names won't include the instance type anymore. This lets you change the instance type for existing ones whenever you need to, without causing any problems or risking damage to the cluster when you run the create command again.

[vitobotta]

Either upgrade k3s, or run sudo systemctl stop k3s, followed by sudo k3s certificate rotate' then sudo systemctl start k3s`.

[nmehlei]

Alright, that'd be straight-forward. But won't upgrading k3s re-create the nodes and hence run into the same 'node type not available' situation again?

[vitobotta]

If you just rerun the create command with the existing config it won't recreate the nodes. But perhaps I'd first try to fix the certificates manually.

[nmehlei]

Perfect, this worked wonderfully, thanks!

[vitobotta]

Nice!