Renew expired UMB certificates

How to renew the certificates used to authenticate against shared services, such as UMB.

Problem

There are 2 service accounts used to access UMB:

  1. cki-amqp-bridge: Read only permission.

  2. cki-umb-messenger: Write permission on the following topics:

    • VirtualTopic.eng.cki.ready_for_test
    • VirtualTopic.eng.ci.cki.#

These service accounts use certificates to authenticate.

Steps

  1. The certificates are automatically renewed every year via the Dogtag certificate manager. No manual steps are necessary!
Last modified October 7, 2022: Document artifact storage (b3c3b24)