Updating Certificates & Vault Tokens in the RSP

Updating Vault Tokens

• Generate a new token pair

  • In the case of using using vault.lsst.codes contact Adam to generate a new pair)
  • If we're running our own Vault instance but want to use our tooling, it's the tokenadmin command in https://github.com/lsst-sqre/lsstvaultutils

• Update the secret vault-secrets-operator in the namespace vault-secrets-operator with the new read token

• Restart vault-secrets-operator.

Updating Certificate

• Certificates are kept in the tls-certificate secret in the ingress-nginx namespace. Update the secret there (Not sure if this requires a restart of the ingress)