Platform & DevOps·Secrets, identity and the supply chain
everything worked for a year and then stopped at once on a Sunday, because a certificate nobody owned had expired.
Certificate rotation
Also calledcertificate renewal, cert expiry, certificate lifecycle
Replacing TLS certificates before they expire, ideally automatically. Expiry is a uniquely predictable outage that keeps happening because it is invisible until the day, the owner has often left, and internal certificates are excluded from the external monitoring that would have caught it. Short-lived automatically-renewed certificates are strictly safer, because a renewal path exercised daily is one you know works.