Force a renewal cert-manager issued certificates in kubernetes.

cert-renew.sh

#!/bin/bash
set -euo pipefail
namespaces="$(kubectl get namespaces -o json | jq -r '.items[] | .metadata.name')"
for name in $namespaces
do
  certificates="$(kubectl get certificates -n $name -o json | jq -r '.items[] | .metadata.name')"
  for cert in $certificates
  do
    kubectl patch certificate "$cert" -n "$name" -p '[{"op": "add", "path": "/spec/renewBefore", "value":"2159h59m30s"}]' --type='json'
    #kubectl patch certificate "$cert" -n "$name" -p '[{"op": "remove", "path": "/spec/renewBefore"}]' --type='json'
  done
done