The problem we foresee is that the current SSL certs are already loaded by NGINX. In the past, the ingress controller seemed to only read SSL certs at startup time.

We will definitely need to, at the very least, clear out any existing *-tls-secret, and replace it with a new secret (of the same name) that contains the new certs.

Best case: we may need to restart the ILB controller to make this work.

Worst case: we may need to delete and recreate ALL existing ingress rules in ALL namespaces.

This ticket is complete when the new valid SSL cert has been installed on https://www.workbench.nationaldataservice.org