Certificate Renewal Is a Deployment Workflow, Not a Cron Job
DevOps.com, Friday, August 28th, 2026
Treating TLS certificate renewal as a full deployment workflow, not a scheduled task, prevents silent outages.
Franz Alliod argues certificate renewal must be handled as a complete deployment workflow rather than a simple cron job, since success requires the new certificate to actually reach production, get reloaded by services, and be verified live on the endpoint.
Common failure modes include certificates sitting on disk but never served, services holding stale certificates in memory despite file updates, and configuration drift causing automation scripts to miss their real targets.
The piece calls for operational controls, private-key security boundaries, and end-to-end verification whether running on Kubernetes or traditional infrastructure.