In CDK-like deployment with latest versions of the charms and EasyRSA as the cert authority I can see that master components restarting every minute:
2019-04-27 03:15:24 INFO juju-log certificates:7: Certificate information changed, restarting api server
2019-04-27 03:15:25 INFO juju-log certificates:7: status-set: maintenance: Restarting snap.kube-apiserver.daemon service
--
2019-04-27 03:16:24 INFO juju-log certificates:7: Certificate information changed, restarting api server
2019-04-27 03:16:24 INFO juju-log certificates:7: status-set: maintenance: Restarting snap.kube-apiserver.daemon service
--
2019-04-27 03:17:17 INFO juju-log certificates:7: Certificate information changed, restarting api server
2019-04-27 03:17:17 INFO juju-log certificates:7: status-set: maintenance: Restarting snap.kube-apiserver.daemon service
On the side of EasyRSA charm it looks like the handler of "client-relation-changed" is called every 30 seconds or even more often:
https://pastebin.ubuntu.com/p/ZBsDqG37xf/
From the bug template:
"When reporting a Charmed Kubernetes problem, please run CDK Field Agent (https:/ /github. com/juju- solutions/ cdk-field- agent) and include the resulting tarball as an attachment to your bug."