The default expected behavior after adopting the data plane would be that the new certificates are generated, uploaded into the EDPM nodes and placed in the right places, but the services running on those nodes are not restarted or notified in any way.

This might be an issue, since the old certificates will not be tracked by the new control plane.

The following might be possible:

1. Schedule a planned restart of EDPM nodes, which should happen within a month after the Data Plane Adoption takes place, making sure no certificate expires before this time.
2. Trigger certificate reload for all of the EDPM services or apply the certificate reload commands. This should not restart or interrupt any workloads on EDPM
3. Upload the old certificates for tracking into the new control plane, so cert-manager can keep track of the old certificates and reload them as needed.