This is a copy of Bugzilla bug 2117524 for backport to 4.11.z
Description of problem:
On routers configured with mTLS and CRL defined in the CA with a CDP ; new CRL is downloaded only when restarting the ingress-operator.
Version-Release number of selected component (if applicable):
Enable mTLS with a CRL
CRL is not download when expired
Clients get "SSL client certificate not trusted" errors while accessing resources
ingress-operator triggers CRL download when approaching expiration date so that the configmap is updated without manual action