TLS Certificate Renewal

[arun-kbharathan-e3768]

Is there any documentation on how to handle TLS certificate renewal when they approach expiration?

[DandyDeveloper]

@arun-kbharathan-e3768 It'll be the same as everything is my understanding. You've got the secret to update in Kubernetes, then you'll need to trigger a rollover of the nodes for the k8s side to do the work.

Otherwise, you could use a config reload sidecar attached to a node, then do a security reload for certificates: https://opensearch.org/docs/latest/security/access-control/api/#reload-transport-certificates

There's no native option at the moment in the helm chart, as far as I understand.