I have a Kops cluster where I want to rotate the client certificate in the kubeconfig. I read and follow https://kops.sigs.k8s.io/operations/rotate-secrets/, but the certificate in the kubeconfig is still valid.

I check kops get keypair kubecfg and see the kubecfg keypair is not rotated. If I try kops create keypair kubecfg, I get this error

Error: adding keypair to "kubecfg" is not supported

Can anyone please help? Thanks a lot in advance.