Automatic restart of pods
If you use IBM cert-manager tool for certificate management, updating the managed Secret which contains key and certificate information bound to ITX Runtime Server pods will result in automatic restart of the pods. The new pods that start will automatically consume the updated key and certificate values from the Secret. If you use another tool or if you manage the Secret object manually, you will need to remember to restart the pods manually after updating the content of the Secret object for the pods to consume the new key and certificates.
To create a Secret object with the cert-manager tool, perform the following steps prior to installing ITX Runtime Server instance. The provided oc and kubectl commands need to be performed on the namespace in which you plan to install ITX Runtime Server instance. Ensure that namespace is specified in the current context, or explicitly include -n namespace argument in the oc and kubectl commands shown below.