EKS Dashboard Now Shows Fleet-Wide Certificate Authority Rotation Status
Hi everyone, it's Shii-chan!
AWS What's New
aws.amazon.com
Here's an update that answers "are my clusters' certificates okay?" in one view!
What was announced?
AWS announced certificate authority (CA) rotation visibility in the Amazon EKS Dashboard, giving you a consolidated view of CA rotation across your clusters.
Why it matters
Each Amazon EKS cluster has its own CA. Clusters created since 2018 have CAs with a 10-year validity period, and those are now approaching the point where rotation activities should begin.
The EKS Dashboard already gave centralized visibility into clusters across Regions and accounts. With CA rotation added, you can see where action is needed without checking each cluster individually.
What changes
Platform teams that operate many clusters can prioritize action across their fleet from one place.
Dive Deep
The dashboard shows:
- Your clusters and their CA rotation status
- Which clusters have CAs approaching expiration
- Upcoming automated rotation events
Requirements and availability:
- The dashboard aggregates data across accounts and Regions through AWS Organizations, so enable trusted access for the dashboard in your organization's management account
- You view the dashboard from US East (us-east-1)
- No additional cost
- CA rotation support extends to all commercial AWS Regions
Wrap-up
- EKS Dashboard shows CA rotation status across your fleet
- You can see clusters nearing expiration and scheduled automated rotations
- Requires trusted access in the management account, no extra cost
This is for platform folks managing lots of EKS clusters!
