Document URL: 

https://docs.openshift.com/container-platform/3.3/install_config/router/default_haproxy_router.html#using-wildcard-certificates

Section Number and Name: 
redeploying-router-certificates-manually

Describe the issue: 

  Steps are missing on how to  manually redeploy the router certs. 

Suggestions for improvement: 
The steps involved can be here in this KCS: 

  https://access.redhat.com/solutions/2650171

I have also typed them out again here: 

1. Check to see if a secret containing the router default certs is already added to the router. 

   # oc volumes dc/router
deploymentconfigs/router
  secret/router-certs as server-certificate
    mounted at /etc/pki/tls/private

  -If this is already configured skip to step 3 and just over write the secret. 

2. Insure that you have a default cert directory set for the following variable DEFAULT_CERTIFICATE_DIR 

   # oc env dc/router --list

   DEFAULT_CERTIFICATE_DIR=/etc/pki/tls/private

2a. If not set set the variable to the following. 

   # oc env dc/router DEFAULT_CERTIFICATE_DIR=/etc/pki/tls/private

3. Overwrite or create a router certs secret. 

   # cat custom-router.crt custom-ca.crt > custom-router.pem 

   A- Overwrite 
   # oc secrets new router-certs tls.crt=custom-router.pem custom-tls.key=router.key \
       -o json --type='kubernetes.io/tls' --confirm | \
   oc replace -f -
   
   B- Create New 
    # oc secrets new router-certs tls.crt=custom-router.pem custom-tls.key=router.key \
      --type='kubernetes.io/tls' --confirm
    # oc volume dc/router --add --mount-path=/etc/pki/tls/private --secret-name='router-certs' --name router-certs

4. Deploy latest router. 

    # oc deploy router --latest