When cert expires on commerce backend, the pod ends up taking the old certificate, instead of the newly generated one.

[L1ghtman2k]

Due to how we are loading cert in the backend, the renewal of the cockroach cert doesn't apply correctly to this workload. We should look for a better, more native approach of loading the cert into the pod.

[L1ghtman2k]

Current workaround when cert expires:

• save commerce backend's manifest file
• Delete the workload completely kubectl delete deployment ...commerce-backend...
• Recreate using the saved file

This process ensures that the volumes now contain the most up-to-date cert

[L1ghtman2k]

Same applies to cockroach client