Auto renewal of SSL Certificate

This document demonstrates auto renewal of Lets Encrypt SSL certificate for Expertflow CX.

Prerequisites:-

EF-CX is deployed.
Let’s Encrypt SSL certificate is applied.

Prepare For Deployment

change directory:-

CODE

cd cim-solution/kubernetes/

update the FQDN:-

CODE

sed -i 's/devops[0-9]*.ef.com/<FQDN>/g' scripts/ssl-renewal/*

Run the Cronjob

CODE

0 0 1 */2 * scripts/auto-renewal/auto-renewal.sh

This command will run this CronJob after every 2 months. Default duration of SSL certificate is 3 months. This will update the SSL Certificate before the expiration.

Verify

Run the following command to list down the currently active certificate:

CODE

kubectl get certificate -n expertflow

describe the certificate:

CODE

kubectl describe certificate -n expertflow <certificate name>