Changing the controlPlaneEndpointOverride value in a Konvoy Cluster

Overview

It is not currently possible to easily change the value of the controlPlaneEndpointOverride in a Konvoy cluster after performing the initial 'konvoy up'.   

If you need to change this value, or have inadvertantly done so, you will experience problems because the signing certificates for the Kubernetes apiserver will not include SAN's for the new IP Address.   This will cause connection failures for new clients attempting to connect to the apiserver.  

Solution

It is possible to generate new apiserver certificates with the new IP addresses, but it is a manual procedure.  Please reach out to D2iQ support for instructions and guidance on the procedure to generate new apiserver certificates with the correct configuration.