cert-manager
Hard
Commands
How do you make cert-manager reissue a certificate right away, before it is due for renewal?
Select your answer:
Show answer and explanation
Answer: cmctl renew <certificate-name>
Explanation
'cmctl renew' sets the Certificate's Issuing condition, which starts a new issuance the same way a scheduled renewal does, and '--all' renews every Certificate in a namespace. Deleting the Secret also triggers reissuance, but the app has no certificate until the new one arrives.
More hard cert-manager questions
- What does the Secret named in an ACME issuer's privateKeySecretRef contain?
- Let's Encrypt fails HTTP-01 validation for app.example.com. Which URL must be reachable from the internet?
- A Certificate fails to issue several times in a row, for example because the issuer is misconfigured. How does cert-manager retry?
- Which cert-manager sub-project copies CA bundles into namespaces as ConfigMaps or Secrets, so applications can trust a private CA?
- Which cert-manager component issues a certificate straight into a pod's volume without creating a Secret?
- What has to happen to a CertificateRequest before an issuer will sign it?