Accessing the foundational services endpoint certificate

The foundational services endpoint certificate is stored within the Kubernetes Secret ibmcloud-cluster-ca-cert in the ibm-common-services namespace. The certificate can be imported into your client truststores to access the foundational services console and APIs. To retrieve and decode the certificate, run the following command:

oc get secret -n ibm-common-services ibmcloud-cluster-ca-cert -o jsonpath='{.data.ca\.crt}' | base64 --decode

Your client truststore would need to be updated if the foundational services endpoint certificate is replaced or refreshed. Replacement or refresh is based on your certificate rotation schedule. For more information, see

• Replacing the foundational services endpoint certificate
• Refreshing foundational services internal certificates