Mirantis Container Cloud (MCC) becomes part of Mirantis OpenStack for Kubernetes (MOSK)!

Starting with MOSK 25.2, the MOSK documentation set covers all product layers, including MOSK management (formerly MCC). This means everything you need is in one place. The separate MCC documentation site will be retired, so please update your bookmarks for continued easy access to the latest content.

LBaaS certificate

MOSK automatically generates the TLS certificate used by Octavia Amphora load balancers. This certificate is stored in the octavia-amphora-tls-certs Kubernetes secret in the openstack namespace. It is generated automatically during the initial OpenStack deployment and is renewed through the automated certificate rotation procedure.

Monitoring certificate expiration

MOSK exports LBaaS certificate expiration information to StackLight through the osdpl_certificate_expiry metric with the label octavia-amphora-tls-certs. The alert is triggered when the certificate is nearing its expiration date and indicates that a rotation should be scheduled.

Triggering certificate rotation

For detailed instructions on how to perform the automated LBaaS certificate rotation, see Rotate Octavia Amphora (LBaaS) certificates.