Replacing the default ingress certificateAdding API server certificatesSecuring service traffic using service serving certificatesUpdating the CA bundle