Apply custom certificates

To apply the new certificate bundle, restart the Domino services that use custom certificates.

You might interrupt user workflows by restarting pods or deleting services. If downtime is acceptable in your environment, you can use the following command to delete all pods. This replaces the other commands in this section. Update the namespace to match the one used in your Domino installation.

kubectl get pods -n <namespace> -ojson | jq -r '.items[] | select(.spec.volumes[]? | select(.configMap.name == "domino-generated-certificates")) | .metadata.name' | xargs kubectl delete pod -n <namespace> --wait=false

Delete a pod to restart a service:

kubectl delete pod -n <namespace> <pod name>

Find the pods and services that use custom certificates. Update the namespace in each command to match the one used in your Domino installation.

kubectl get pods -n <namespace> -ojson | jq -r '.items[] | select(.spec.volumes[]? | select(.configMap.name == "domino-generated-certificates")) | .metadata.name'

Last modified on June 13, 2026

Architecture & deployment

Identity & access

Infrastructure & compute

Platform configuration

Data administration

Operations, monitoring & cost

Security & compliance

Apply custom certificates