Help Center/ Cloud Container Engine/ FAQs/ Cluster/ Cluster Creation/ How Do I Update the Root Certificate When Creating a CCE Cluster?
Updated on 2026-05-25 GMT+08:00

How Do I Update the Root Certificate When Creating a CCE Cluster?

The root certificate of CCE clusters is the basic certificate for Kubernetes authentication. Both the Kubernetes cluster control plane and the certificate are hosted on Huawei Cloud CCE. CCE will periodically update the certificate. This certificate is not open to users but will not expire.

The X.509 certificate is enabled in Kubernetes clusters by default. CCE will automatically maintain and update the certificate.

Obtaining a Cluster Certificate

You can obtain a cluster certificate on the CCE console to access Kubernetes. For details, see Accessing a Cluster Using an X.509 Certificate.