AKS Learn feedback: Dapr CLI does not support rotating self-signed certificates or configuring custom certificates with the latest version

[Sridhar-Siddureddy]

Type of issue

Code doesn't work

Feedback

I'm following the guidance from the [Azure AKS Dapr settings documentation](https://learn.microsoft.com/en-us/azure/aks/dapr-settings?tabs=cli#generate-a-new-dapr-generated-self-signed-certificate) which recommends using the Dapr CLI to generate or rotate self-signed certificates.

However, the Dapr CLI operation fails because the Helm chart version corresponding to the installed Dapr extension is not available in the Dapr Helm repository. This blocks the ability to rotate certificates as documented.

---

❗Steps to Reproduce:

1. Install Dapr on AKS using the Azure CLI extension:

   az aks enable-addons --addons dapr --name <cluster-name> --resource-group <resource-group>

2. Verify the control plane version:

   kubectl get pods -n dapr-system -o jsonpath="{.items[0].metadata.labels.app\.kubernetes\.io/version}"

   Output:

   1.15.3-msft.2
   

3. Attempt to rotate certificates using Dapr CLI:

   dapr mtls renew-certificate -k --restart

4. Observe the error:

   Starting certificate rotation
   Using provided certificates
   Updating certificates in your Kubernetes cluster
   Dapr control plane version 1.15.3-msft.2 detected in namespace dapr-system
   certificate rotation failed: chart "dapr" version "1.15.3-msft.2" not found in https://dapr.github.io/helm-charts repository
   

---

Expected Behavior:
The Dapr CLI should be able to rotate the certificate as documented without dependency issues.

Actual Behavior:
CLI fails due to missing Helm chart version in the repository.

Impact:
This affects the ability to manage mTLS certificates using the recommended CLI method on AKS with the Dapr extension installed.

---

Page URL

https://learn.microsoft.com/en-us/azure/aks/dapr-settings?tabs=cli

Content source URL

https://github.com/MicrosoftDocs/azure-aks-docs/blob/main/articles/aks/dapr-settings.md

Author

@hhunter-ms

Document Id

37ae1a31-6adc-302b-5a21-23ed71145fef

Platform Id

adf9776b-18ff-6264-cb62-af321a807635