Auto renewal of SSL Certificate | Expertflow CX

This document demonstrates auto renewal of Lets Encrypt SSL certificate for Expertflow CX.

Prerequisites:-

EF-CX is deployed.
Let’s Encrypt SSL certificate is applied.

Prepare For Deployment

change directory:-

cd cim-solution/kubernetes/

update the FQDN:-

sed -i 's/devops[0-9]*.ef.com/<FQDN>/g' scripts/ssl-renewal/*

Run the Cronjob

scripts/ssl-renewal/ssl-renewal.sh 0 0 1 */2 *

This command will run this CronJob after every 2 months. Default duration of SSL certificate is 3 months. This will update the SSL Certificate before the expiration.

Verify

Run the following command to list down the currently active certificate:

kubectl get certificate -n expertflow

describe the certificate:

kubectl describe certificate -n expertflow <certificate name>