Performing yearly certificate maintenance

Rotate and renew certificates on a yearly schedule to prevent service disruptions in Automation Suite.

We recommend rotating certificates before their expiration date. Make sure to schedule a downtime period to address potential issues. To be informed in a timely manner of the certificate expiration dates, configure alerts for your cluster. Doing so prevents service disruptions. For details, refer to Alert runbooks.

We highly recommend performing the following yearly maintenance tasks:

1. Renew the SSL certificate. For details, refer to Managing server certificates.
2. Renew the identity certificate. For details, refer to Managing identity token-signing certificates.
3. Renew the internal Kubernetes certificate. For details, refer to Managing RKE2 certificates.
4. Clean up logs manually. For details, refer to How to clean up logs.