Let Your Trust Anchor Rotate Itself
Thursday, July 16, 2026
9 am PT | 12 pm ET | 6 pm CET
You've deployed Linkerd, mTLS is automated, your workload certificates rotate themselves, and identity just works. But at the root of all that trust sits one certificate, Linkerd won't rotate automatically, and when it expires, every meshed connection fails with it. When does yours expire?
The trust anchor rotation operator (part of Buoyant Enterprise for Linkerd) takes that toil off your plate. It rotates your trust anchor automatically across every cluster with zero downtime. In this Service Mesh Academy, we'll go under the hood on the careful choreography that makes it safe. Join us for a hands-on demo to see what painless certificate rotation really looks like.
What you'll get out of this
- Learn how the trust anchor rotation operator automates the full rotation lifecycle.
- Understand why trust anchor expiry is one of the few things that can take down an entire healthy mesh and how automated rotation keeps you ahead of it before it becomes an outage
- Know how to configure and operate trust anchor rotation in your own clusters and fold it into your day-to-day operations
Getting Ready
This is a hands-on workshop, so it's important that you arrive prepared with a Kubernetes cluster (pretty much any kind will do!) and the Linkerd CLIs installed on your machine! We'll use Buoyant Enterprise for Linkerd version 2.20, which includes the new TARO feature used in this workshop. Check out the BEL Getting Started Guide for specific instructions on how to set that up. (As always, if you don’t want to do the hands-on portion, you are welcome to just listen in. But it won’t be as fun!)
Speakers

Joe Fuller
|
Solutions Architect
Joe Fuller is a Solutions Architect at Buoyant, the creators of Linkerd. With a deep background in cloud native infrastructure, Joe specializes in helping enterprises navigate the complexities of their Kubernetes deployments to achieve high availability and security. He works closely with customers to ensure the successful deployment and scaling of mission-critical applications.