Thanks for the detailed report.
The certs_changed handler[1] needs to be updated to also restart the cdk.master.auth-webhook service.
[1]: https://github.com/charmed-kubernetes/charm-kubernetes-master/blob/2d7eda74e22b1fe67e2ed0ae17556c95da935077/reactive/kubernetes_master.py#L1227-L1230
Thanks for the detailed report.
The certs_changed handler[1] needs to be updated to also restart the cdk.master. auth-webhook service.
[1]: https:/ /github. com/charmed- kubernetes/ charm-kubernete s-master/ blob/2d7eda74e2 2b1fe67e2ed0ae1 7556c95da935077 /reactive/ kubernetes_ master. py#L1227- L1230