add help for TLS secret update in kuttl/chainsaw

Originally I had updated the secrets here, however
we want to sync up with what dciabrin merged
in 1bb2318 so this reverts the
secrets back to that merge.

Author: zzzeek

config/samples/cert-manager-galera-cert.yaml

@@ -47,7 +47,7 @@ spec:
   secretTemplate:
     labels:
        mariadb-ref: openstack
-  duration: 6h
+  duration: 12720h
   renewBefore: 1h
   subject:
     organizations:

tests/chainsaw/common/tls-certificate.yaml

@@ -68,6 +68,15 @@
 #     group: cert-manager.io
 #     kind: Issuer
 # ---
+#
+# STEPS TO RECREATE, WHEN CERT EXPIRES (errors in pod logs):
+#
+# 1. make sure cert-manager-operator is installed and running
+# 2. install galera-cert and dependencies:
+#     oc apply -f config/samples/cert-manager-galera-cert.yaml
+# 3. copy secret/galera-tls data below, change ca.crt to tls-ca-bundle.pem
+# 4. add # notsecret suffix to the tls.key value
+#
 apiVersion: v1
 kind: Secret
 metadata:

tests/kuttl/tests/galera_cluster_restart/02-tls-certificate.yaml

@@ -35,6 +35,15 @@
 #     group: cert-manager.io
 #     kind: Issuer
 # ---
+#
+# STEPS TO RECREATE, WHEN CERT EXPIRES (errors in pod logs):
+#
+# 1. make sure cert-manager-operator is installed and running
+# 2. install galera-cert and dependencies:
+#     oc apply -f config/samples/cert-manager-galera-cert.yaml
+# 3. copy secret/galera-tls data below, change ca.crt to tls-ca-bundle.pem
+# 4. add # notsecret suffix to the tls.key value
+#
 apiVersion: v1
 kind: Secret
 metadata:

tests/kuttl/tests/galera_deploy_tls/01-tls-certificate.yaml

@@ -35,6 +35,14 @@
 #     group: cert-manager.io
 #     kind: Issuer
 # ---
+# STEPS TO RECREATE, WHEN CERT EXPIRES (errors in pod logs):
+#
+# 1. make sure cert-manager-operator is installed and running
+# 2. install galera-cert and dependencies:
+#     oc apply -f config/samples/cert-manager-galera-cert.yaml
+# 3. copy secret/galera-tls data below, change ca.crt to tls-ca-bundle.pem
+# 4. add # notsecret suffix to the tls.key value
+#
 apiVersion: v1
 kind: Secret
 metadata: