[Release-1.27] - Incorrect warning message for expiring K3s CA certificates about k3s

[VestigeJ]

This branch notably took longer to reproduce the log chatter than other dominant branches.

Reproduced using VERSION=v1.27.14+k3s1
Validated using COMMIT=5f656d12fbc8c03e838c9772ebbc8dcd84ca613b

$ sudo mkdir -p /var/lib/rancher/k3s/server/tls/etcd;
$ sudo openssl genrsa -out /var/lib/rancher/k3s/server/tls/root-ca.key 4096;
$ sudo openssl req -x509 -new -nodes -sha256 -days 360 -subj "/CN=k3s-root-ca@test" -key /var/lib/rancher/k3s/server/tls/root-ca.key -out /var/lib/rancher/k3s/server/tls/root-ca.pem;
$ curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | sudo bash -;
$ COMMIT=5f656d12fbc8c03e838c9772ebbc8dcd84ca613b
$ sudo INSTALL_K3S_COMMIT=$COMMIT INSTALL_K3S_EXEC=server ./install-k3s.sh

Current release for v1.27.14+k3s1

$ kg events --field-selector involvedObject.kind==Node

LAST SEEN   TYPE      REASON                           OBJECT                  MESSAGE
22m         Warning   CACertificateExpirationWarning   node/ip-ip   Certificate authority certificates require attention - check k3s documentation and begin planning rotation: certificate-authority/server-ca.crt: certificate CN=k3s-root-ca@test will expire within 90 days at 2025-05-30T19:14:25Z, certificate-authority/client-ca.crt: certificate CN=k3s-root-ca@test will expire within 90 days at 2025-05-30T19:14:25Z, certificate-authority/request-header-ca.crt: certificate CN=k3s-root-ca@test will expire within 90 days at 2025-05-30T19:14:25Z, certificate-authority/peer-ca.crt: certificate CN=k3s-root-ca@test will expire within 90 days at 2025-05-30T19:14:25Z, certificate-authority/server-ca.crt: certificate CN=k3s-root-ca@test will expire within 90 days at 2025-05-30T19:14:25Z

//attention showing correct days certificate is valid for

$ kg events --field-selector involvedObject.kind==Node

LAST SEEN   TYPE      REASON                           OBJECT                  MESSAGE
90s         Warning   CACertificateExpirationWarning   node/ip-ip   Certificate authority certificates require attention - check k3s documentation and begin planning rotation: certificate-authority/server-ca.crt: certificate CN=k3s-root-ca@test will expire within 365 days at 2025-05-30T22:26:47Z, certificate-authority/client-ca.crt: certificate CN=k3s-root-ca@test will expire within 365 days at 2025-05-30T22:26:47Z, certificate-authority/request-header-ca.crt: certificate CN=k3s-root-ca@test will expire within 365 days at 2025-05-30T22:26:47Z, certificate-authority/peer-ca.crt: certificate CN=k3s-root-ca@test will expire within 365 days at 2025-05-30T22:26:47Z, certificate-authority/server-ca.crt: certificate CN=k3s-root-ca@test will expire within 365 days at 2025-05-30T22:26:47Z
90s         Normal    Starting                         node/ip-ip   Starting kubelet.
90s         Warning   InvalidDiskCapacity              node/ip-ip   invalid capacity 0 on image filesystem
90s         Normal    NodeHasSufficientMemory          node/ip-ip   Node ip-ip status is now: NodeHasSufficientMemory
90s         Normal    NodeHasNoDiskPressure            node/ip-ip   Node ip-ip status is now: NodeHasNoDiskPressure
90s         Normal    NodeHasSufficientPID             node/ip-ip   Node ip-ip status is now: NodeHasSufficientPID
89s         Normal    NodeAllocatableEnforced          node/ip-ip   Updated Node Allocatable limit across pods
89s         Normal    NodeReady                        node/ip-ip   Node ip-ip status is now: NodeReady
89s         Normal    Starting                         node/ip-ip
86s         Normal    NodePasswordValidationComplete   node/ip-ip   Deferred node password secret validation complete
83s         Normal    Synced                           node/ip-ip   Node synced successfully
74s         Normal    RegisteredNode                   node/ip-ip   Node ip-ip event: Registered Node ip-ip in Controller