Rotate internal Cloudera Embedded Container Service certificates

Perform the below steps to rotate the control plane certificates for vault, tolerations webhook, embedded database, and ingress certificate, if the cluster is using the default certificate for ingress.

In Cloudera Manager UI, select the ECS cluster, then click ECS Service.
Under Actions, click Rotate Internal ECS Certificates.
A prompt appears requesting confirmation regarding the certificates that will be rotated as part of this command. Proceed by clicking Rotate Internal ECS Certificates.
The command will rotate certificates for vault, ingress controller, and restart related pods.
note
You will notice some additional pods getting restarted as well, this is done by the cdp-reloader service, which restarts certain pods which have annotations regarding the kubernetes secrets and/or configmaps the pod utilizes.
After the command executes, you must wait for all control plane pods to run again (same state prior to running the command) and then proceed with your regular use.
note
For Cloudera Data Warehouse, ensure that you refresh your Environment, Cloudera Data Catalog, and Virtual Warehouses after you have updated the certificate.