Compliant Kubernetes Service documentation has moved

Please note: You are not reading Kubernetes documentation. If you're looking for Compliant Kubernetes Service documentation, it has moved. Read more here.

SSL Cert Install Troubleshooting

SSL Certificate Renewal

My SSL certificate has or is going to expire and needs to be updated

1. Obtain your updated SSL certificates from your SSL certificate provider

2. Update your certificates using the certs update command in the Datica CLI.

3. Redeploy your service proxy for your certificate update to take effect. To redeploy your service proxy via the CLI use the command datica -E "<your_env_name>" redeploy service_proxy.

Site and SSL Cert Change

I have a new domain and SSL certificate for my application

1. Create a new site for your applicaton using the CLI.

2. Create a new cert for your application.

3. Once you have created a new site and uploaded a new cert you must redeploy your service proxy. To redeploy your service proxy via the CLI use the command datica -E "<your_env_name>" redeploy service_proxy.

4. Once you have verified that your new site and cert have been updated, you can remove the old site and cert using the datica -E “” sites rm and datica -E “” certs rm CLI commands.

  • Note: Depending on what kind of environment you have, the ability to redeploy your service proxy may not be enabled. Contact us at Or open a Zendesk ticket and Datica support will redeploy your service proxy and re-enable service proxy redeploys for your environment.

Common SSL Questions

  • Question Does the CSR need to be generated by Datica?
  • Answer No, you can generate the CSR. Instructions on how to do this can be found here.
  • Question Why does my certificate not work for all of my applications?
  • Answer Depending on the type of certificate you have, you may only be able to register one domain. If you have a wildcard certificate it will allow you to enable SSL on all of you applications with different subdomains.