POST /api/v1/cert-manager/certificates/:id/renew

PKI Certificates

Renew a certificate. The renewed certificate copies the one being renewed, then applies only the changes supplied here. Profile defaults are not applied.

post/api/v1/cert-manager/certificates/{id}/renew

Path parameters

idstring uuid required

The ID of the certificate to renew.

Request body

renewalKeySource'new' | 'reuse' | 'csr'

How the renewed certificate's key pair is handled. 'new' generates a fresh pair, 'reuse' keeps the current one so the renewed certificate carries the same public key, and 'csr' takes the key from a supplied signing request. Defaults to 'new'.

csrstring

A PEM-encoded certificate signing request to renew from. Its subject, key and extensions take precedence, so only TTL and basic constraints may be set alongside it.

Response

Default Response

certificatestring required

issuingCaCertificatestring required

certificateChainstring required

privateKeystring

serialNumberstring required

certificateIdstring required

certificateRequestIdstring required