Renew SSL certificates for OCNADD Services

The renewal of SSL certificate is required when the certificates for OCNADD services get expired or reaches the expiry date.

To renew the certificates:

1. Regenerate the CSR, private key, and secrets for the OCNADD services using the CA certificate and CA key.

   For more information about the certificates, see the Customer Provided CACert and CAKey in the Configure SSL or TLS Certificate section of Oracle Communications Network Analytics Data Director Installation Guide.

2. Enter y for the Would you like to delete existing demoCA folder? (y/n command.
3. Get the statefulsets for OCNADD services using the following command:

   kubectl get statefulset-n <namespace-name>

4. Trigger rolling update for aforementioned services which are listed as statefulsets using following command:

   kubectl rollout restart statefulset <STATEFULSET-NAME> -n <namespace-name>

5. Get the deployment for OCNADD services by running the following command:

   kubectl get deployment -n <namespace-name>

6. Trigger rolling update for these services using the following command:

   kubectl rollout restart deployment <DEPLOYMENT-NAME> -n <namespace-name>