Automate renewal of dynatrace-webhook-certs on Kubernetes

n002213f — Mon, 19 Dec 2022 08:50:30 GMT

I have 2 AKS clusters: 1.19.11 and 1.24.6.

On 1.19.11 I have the Dynatrace OneAgent installed by Dynatrace Operator 0.5.1.

On 1.24.6 I have the Dynatrace OneAgent installed by Dynatrace Operator 0.10.0

On cluster 1.19.11 I have noted that the dynatrace-webhook-certs are automatically getting rotated/renewed once expired

On cluster 1.24.6, the same cert is not getting rotated/renewed once expired.

Re: Automate renewal of dynatrace-webhook-certs on Kubernetes

n002213f — Thu, 29 Dec 2022 07:18:34 GMT

There was a simple fundamental flaw in our migration. We moved all objects we had noted in the 1.19.11 cluster, this including dynatrace-webhook-certs. The operator will not renew the certs they already exist. We removed the certs and let the operator create them and the issue is resolved.

topic Automate renewal of dynatrace-webhook-certs on Kubernetes in Container platforms

Automate renewal of dynatrace-webhook-certs on Kubernetes

Re: Automate renewal of dynatrace-webhook-certs on Kubernetes