By default, the private key won't be rotated automatically. Using the settingrotationPolicy: Always, the private key Secret associated with a Certificateobject can be configured to be rotated as soon as an the Certificate is reissued (seeIssuance triggers).