Elasticsearch in HCL Connections Componentpack is secured with Searchguard and needs certificates to work properly. These certificates are generated by bootstrap during the initial container deployment with
These certificates are valid for 10 years (
chain_ca.pem) or 2 years (
elasticsearch*.pem) and stored in the Kubernetes secrets
elasticsearch-7-secret. So when your HCL Connections deployment is running for 2 years, the certficates stop working.