Troubleshoot Mirantis Kubernetes Engine alerts

This section describes the investigation and troubleshooting steps for the Mirantis Kubernetes Engine (MKE) cluster alerts.

• MKEAPICertExpirationHigh

• MKEAPICertExpirationMedium

---

MKEAPICertExpirationHigh

Root cause	MKE cluster root certificate authority (CA) expires in less than 10 days.
Investigation	Connect to an MKE manager node through SSH. List the nodes and their statuses: docker node ls Switch to the node marked as leader. On the leader node, retrieve the CA certificate and inspect its Validity field: docker swarm ca | openssl x509 -noout -text
Mitigation	Contact Mirantis support for a detailed procedure on certificate rotation.

See also

Docker documentation: docker swarm ca

MKEAPICertExpirationMedium

Root cause	MKE cluster root CA expires in less than 30 days.
Investigation and mitigation	Refer to MKEAPICertExpirationHigh.