Upload a New TLS Certificate

if you've already gone through the setup process once, and you want to upload new tls certificates, run this command to restore the ability to upload new tls certificates kubectl n default annotate secret kotsadm tls acceptanonymousuploads=1 adding this annotation temporarily creates a vulnerability for an attacker to maliciously upload tls certificates once tls certificates have been uploaded again, the vulnerability goes away after adding the annotation, you will need to restart the kurl proxy server the simplest way to do that is to delete the kurl proxy pod (the pod will automatically get restarted) with this command kubectl delete pods proxy server this command provides you with the name of the kurl proxy server kubectl get pods a | grep kurl proxy | awk '{print $2}' after the pod has been restarted, re direct your browser to http //\<your ip> 8800/tls to see the same page that you did during the initial installation then, load your tls certificate swimlane recommends that you complete this process as soon as possible in order to avoid anyone from nefariously uploading tls certificates after this process is complete, the vulnerability is closed, and uploading new tls certificates will be disallowed again please repeat the steps above in order to upload new tls certificates