Skip to main content

Set up automatic renewal for a managed certificate

POST 
/api/v1/workspaces/:id/certops/certificates/:certId/renewal-setup

Creates a renew job for the certificate and, in the same transaction, records the durable intent that turns the job's verified result into a renewal profile. A real run and its intent therefore commit together: there is no window in which renewal was requested but nothing was recorded.

dryRun: true makes this a preflight instead. It creates a dry_run renew job (which terminates as dry_run_complete, never succeeded) and records no intent, so a preflight can never configure anything. The certificate detail response reports a completed preflight with no intent behind it so the operator can resume.

Refused when the certificate already has a renewal profile, when its key mode is not agent-deployable, or when it is deployed in more than one location: the schema records a single deployment path, so a second location would silently go unrenewed behind a badge reading "auto".

Request​

Responses​

Renew job created (and, for a real run, the adoption intent recorded)