Disable Client Bundle

MKE administrators can disable the generation and use of the client certificate bundle by editing the MKE configuration file or through the MKE web UI.

Important

Disabling the client certificate bundle causes the immediate and permanent deletion of any existing client bundles, and users thereafter will not be able to access the cluster by way of the client bundle. In addition, the action also causes any subsequent attempts to download or generate a new client bundle to fail.

To re-enable the client certificate bundle at a later date, you must download and configure a new client bundle to restore access.

To disable the client certificate bundle using the MKE configuration file:

  1. Obtain the current MKE configuration file for your cluster.

  2. Set the disable_client_bundle configuration parameter to true.

  3. Upload the newly edited MKE configuration file.

To disable the client certificate bundle using the MKE web UI:

  1. Log in to the MKE web UI as an administrator.

  2. In the left-side navigation panel, click the username drop-down.

  3. Click Admin Settings > Tuning to open the Tuning screen.

  4. Scroll down to the Client Bundle Management section.

  5. Toggle the Client Bundle Generation control to the left to disable the function.