This page describes how to update the reference to the vCenter CA certificate if it has changed, as your running admin cluster and user clusters must be informed of the change. This affects the vCenter.caCertPath field in the admin cluster configuration file and the user cluster configuration files for Google Distributed Cloud.
You can update the certificate references with the gkectl update command as described here.
Update the referenced vCenter CA certificate in the cluster configuration files
To update the running admin and user clusters to use the new certificate:
Retrieve the new vCenter CA certificate and unzip it:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-05 UTC."],[[["This guide details how to update the vCenter CA certificate reference in Google Distributed Cloud when the certificate changes."],["The `vCenter.caCertPath` field in both the admin and user cluster configuration files needs to be updated to the path of the new certificate file (`vcenter-ca.pem`)."],["Use the `gkectl update admin` command to update the admin cluster and the `gkectl update cluster` command for each user cluster."],["The new certificate must be downloaded and unzipped from vCenter, then saved as a PEM file."]]],[]]