Replacing a Certificate

You can replace a certificate in a deployed namespace.

Obtain the new certificate .crt and .key files.
Run this command (example): kubectl create secret tls cml-tls-secret --cert=<pathtocrt.crt> --key=<pathtokey.key> -o yaml --dry-run | kubectl -n <cml-workspace-namespace> replace -f -

note
Before replacing a certificate, it is recommended to save the existing certificate in case you need to revert to it later. Run this command to create a backup of the existing certificate: kubectl get secret cml-tls-secret -n <workspace namespace> -o yaml > oldsecret.txt

note
Make sure that any intermediate certificates are concatenated to the server certificate file.

The certificate of an existing session does not get renewed. The new certificate only applies to newly created sessions.