refer
https://docs.microsoft.com/zh-cn/azure/aks/certificate-rotation
kubectl config view --raw -o jsonpath="{.clusters[?(@.name == 'cluster_name')].cluster.certificate-authority-data}" | base64 -d | openssl x509 -text | grep -A2 Validity
Using AZ aks rotate certs to rotate certificates may cause the AKS cluster to shut down for up to 30 minutes.
az aks rotate-certs -g $RESOURCE_GROUP_NAME -n $CLUSTER_NAME
