https://waylonwalker.com/tags/kubenetes/atom.xml 2025-12-08T20:59:27Z All posts with the tag "kubenetes" Waylon Walker markata-go https://waylonwalker.com/check-your-kubeconfig-expire-time/ 2025-12-08T20:59:27Z 2025-12-08T20:59:27Z

Today I learned an important lesson that you should periodically check on your kubeconfigs expiration date. It's easy to do. You can ask for the...

<p>Today I learned an important lesson that you should periodically check on your kubeconfigs expiration date. It’s easy to do. You can ask for the client-certificate-data from your kubeconfig, decode it, and use openssl to get the expiration date.</p> <pre class="chroma"><code><span class="line"><span class="cl">kubectl config view --raw -o <span class="nv">jsonpath</span><span class="o">=</span><span class="s1">&#39;{.users[0].user.client-certificate-data}&#39;</span> <span class="se">\ </span></span></span><span class="line"><span class="cl"><span class="se"></span> <span class="p">|</span> base64 -d 2&gt;/dev/null <span class="se">\ </span></span></span><span class="line"><span class="cl"><span class="se"></span> <span class="p">|</span> openssl x509 -noout -dates </span></span></code></pre><div class="admonition note"> <p class="admonition-title">Note</p> <p>This will only work for the first user, if you have more than one user or context defined in your kubeconfig you will need to adjust.</p> </div> Waylon Walker hello@waylonwalker.com https://waylonwalker.com