About Domino
Domino Data LabKnowledge BaseData Science BlogTraining

Apply custom certificates

To apply the new certificate bundle, restart the Domino services that use custom certificates.

Caution

You might interrupt user workflows by restarting pods or deleting services. If downtime is acceptable in your environment, you can use the following command to delete all pods. This replaces the other commands in this section. Update the namespace to match the one used in your Domino installation.

kubectl get pods -n <namespace> -ojson | jq -r '.items[] | select(.spec.volumes[]? | select(.configMap.name == "domino-generated-certificates")) | .metadata.name' | xargs kubectl delete pod -n <namespace> --wait=false

  1. Delete a pod to restart a service:

    kubectl delete pod -n <namespace> <pod name>

  2. Find the pods and services that use custom certificates. Update the namespace in each command to match the one used in your Domino installation.

    kubectl get pods -n <namespace> -ojson | jq -r '.items[] | select(.spec.volumes[]? | select(.configMap.name == "domino-generated-certificates")) | .metadata.name'