执行年度证书维护

我们建议在证书到期日期之前轮换证书。请务必安排停机时间以解决潜在问题。要在证书过期时获取及时通知，请为集群配置警示。这样做可以防止服务中断。有关更多详细信息，请参阅警示 Runbook。

我们强烈建议执行以下年度维护任务：

1. Renew the SSL certificate. For details, see Managing server certificates.
2. Renew the identity certificate. For details, see Managing identity token-signing certificates .
3. Renew the internal Kubernetes certificate. For details, see Managing Rancher certificates.
4. Renew the cattle webhooks certificate. For details, see the Rancher documentation.
5. Clean up logs manually. For details, see How to clean up logs.