II.
Workflow overview
Reference · liveworkflow:certificate-rotation
Certificate Rotation overview
Rotates TLS certificates across load balancers, service meshes, and internal PKI — tracking expiry dates, automating renewal via ACME or internal CA, validating chain-of-trust, and coordinating zero-downtime rollover across environments. Excludes initial certificate provisioning.
Attributes
displayName
Certificate Rotation
workflowKind
operational
triggerType
scheduled
typicalCadence
quarterly
complexity
cross-team
description
Rotates TLS certificates across load balancers, service meshes, and internal
PKI — tracking expiry dates, automating renewal via ACME or internal CA,
validating chain-of-trust, and coordinating zero-downtime rollover across
environments. Excludes initial certificate provisioning.
Outgoing edges
applies_to_domain2
- domain:infrastructure·DomainInfrastructure
- domain:security·DomainSecurity
involves_role3
- role:platform-engineer·RolePlatform Engineer
- role:security-reviewer·RoleSecurity Reviewer
- role:cloud-architect·RoleCloud Architect
performed_by_org_unit2
- org-unit:platform-team·OrgUnitPlatform Team
- org-unit:security-team·OrgUnitSecurity Team
requires_skill_area2
- skill-area:secrets-rotation·SkillAreaSecrets Rotation
- skill-area:service-mesh-config·SkillAreaService Mesh Configuration
triggers_responsibility2
- responsibility:run-security-scans·ResponsibilityRun security scans
- responsibility:runbook-authoring·ResponsibilityRunbook authoring
Incoming edges
follows_workflow1
- stack-profile:secrets-management·StackProfileSecrets Management (Vault, Kubernetes, Terraform, Docker, Go)