Schedule certificate renewal outside business hours

[charvadzo]

Is your feature request related to a problem? Please describe. When a server certificate is renewed the server usually needs to be restarted to reload. This restart means disconnecting currently connected clients in case of a stateful connection.

Describe the solution you'd like If it would be possible to schedule renewal only to some time window during the day (maybe day in a week as well) it would be possible to do it outside business hours and minimize service disruption for the clients.

Describe alternatives you've considered Tried alternative approach to reload certificate without server restart but is some cases I did not found a way (e.g. VertX MQTT server).

Additional context Currently I'm using Stakater Reloader to restart the servers upon cert renewal

/kind feature

[cert-manager-bot]

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close. /lifecycle stale

[applejag]

Still relevant

[charvadzo]

/remove-lifecycle stale

[oanabutaru98]

any possible workarounds for this?

[applejag]

@oanabutaru98 at our workplace we've employed a very crude workaround.

We've set a reminder about a week before when the Certificate will renew (seen in .status.renewalTime), and then task someone to run cmctl renew to manually renew it outside office hours :)