update-kubernetes-certificate

update.sh

#!/bin/bash

# Setup variables
secret="default --namespace default"
fullchain="/etc/letsencrypt/live/example.com/fullchain.pem"
privkey="/etc/letsencrypt/live/example.com//privkey.pem"
privkey_rsa="/etc/letsencrypt/live/example.com/privkey-rsa.pem"

# Generate rsa privkey
openssl rsa -in $privkey > $privkey_rsa

# Base64 encode and trail trim certs
fullchain_encoded=$(printf "%s" "$(< $fullchain)" | base64 -w0)
privkey_encoded=$(printf "%s" "$(< $privkey_rsa)" | base64 -w0)

# Apply patch
kubectl patch secret $secret -p "{\"data\": {\"tls.crt\": \"$fullchain_encoded\", \"tls.key\": \"$privkey_encoded\"}}"