Automate renewal of dynatrace-webhook-certs on Kubernetes

[n002213f]

I have 2 AKS clusters: 1.19.11 and 1.24.6.

On 1.19.11 I have the Dynatrace OneAgent installed by Dynatrace Operator 0.5.1.

On 1.24.6 I have the Dynatrace OneAgent installed by Dynatrace Operator 0.10.0

On cluster 1.19.11 I have noted that the dynatrace-webhook-certs are automatically getting rotated/renewed once expired

On cluster 1.24.6, the same cert is not getting rotated/renewed once expired.

[n002213f · Accepted solution]

There was a simple fundamental flaw in our migration. We moved all objects we had noted in the 1.19.11 cluster, this including dynatrace-webhook-certs. The operator will not renew the certs they already exist. We removed the certs and let the operator create them and the issue is resolved.