If a browser certificate is close to expiring or you want to host AppCenter on a different domain, you need to rotate the certificate.
From the client machine, do the following:
-
Set the APPCTL_DOMAIN domain to match the one in certificates:
$ export APPCTL_DOMAIN=appcenter.example.com
- Rename the certificate and key to tls.crt and tls.key.
-
Verify the certificates. Check for the DNS name, it should match the APPCTL_DOMAIN:
$ openssl x509 -in tls.crt -text -noout
- Copy the certificates to $APPCTL_HOME (default - ~/.appctl/ on the client machine).
-
Upgrade platform services:
$ appctl platform install --namespace td-platform --name platform platform-1.10.0+build.21.149baa2.tgz -f platform-override.yaml --reset-values
-
Upgrade application services:
$ appctl platform install --namespace appcenter --name appcenter appcenter-1.10.0+build.21.149baa2.tgz -f appcenter-override.yaml --reset-values
-
Restart ambassador:
$ kubectl delete pod -n td-platform -l component=ambassador