Monitoring/healthcheck endpoint should check for certificate expiry date
In our Kubernetes setup cert-manager already updates the secret but the pod will keep using the old certificate as it's loaded into memory. When we add it to the endpoint called by the liveness probe the pod will restart and start using the new certificate.