Kubernetes manual certificate renewal - apiserver ceritificate update failed

  1. Alternatively from temporarily removing its manifest files from /etc/kubernetes/manifests/ and waiting for 20 seconds you can try to restart docker as described in your link, I've found a similar workaround here.
  2. When a root CA certificate update is in progress, kubernetes components (apiserver, scheduler, controller-manager, kubelet) and application pods will be restarted. Since the update is a rolling update, system will be functioning as usual but there will be small performance impact during the update. The user should update the host sequentially so the impact can be minimized. https://docs.starlingx.io/specs/specs/stx-6.0/approved/security-2008675-kubernetes-rootca-update.html

  3. As per this issue it looks like there is no such way.