Refreshing internal certificates

Refresh internal certificates as follows if error with certificate expiry.

1. Switch to the cp4aiops namespace.

   oc project cp4aiops
   

2. Edit the certificate.

   oc edit certificate.certmanager.k8s.io cert
   

3. Add duration and renewBefore after secretName: cert.

     secretName: cert
     duration: 17520h
     renewBefore: 240h
   

4. After you save the changes, verify the output by using the command as follows:

   oc get certificate.certmanager.k8s.io cert -o yaml | grep -i duration -A4
   

   Output:

     duration: 17520h0m0s
     issuerRef:
       kind: Issuer
       name: cs-ca-issuer-for-cam
     renewBefore: 240h0m0s
   

5. Delete the secret certificate.

   oc delete secret cert
   

The Managed services (CAM) pods are restarted.