Editing Cluster Operations (section)

=== Update CA Files ===
For each cluster node:

* Copy the new CA bundle in place (in the opensearch <code>config</code> directory) making sure that permissions allow for read access to the <code>opensearch</code> user.  
* DO NOT copy the node certificates yet.  
* Edit <code>opensearch.yml</code> if needed:
** Update the name of the CA to the new CA bundle file (if needed) in both the <code>ssl</code> and <code>transport</code> parameters, using the appropriate bundle for each parameter (see above)
** Add the DNs (DO NOT replace them yet) for the node and admin certificates if the new DNs are different from what is in the file

* Perform a '''Rolling Restart''' of the node, verifying that there are no SSL/certificate errors, and waiting for "GREEN" status before proceeding 

Now do the same for all dashboards, logstash instances, and any other clients that use the CA to validate cluster identify:

* Install the CA bundle as appropriate, ensuring that the client has read access to the CA bundle.
* Update the CA filename in the configuration file (if needed)
* DO NOT update user certificates at this point
* Restart the client (if needed) and verify proper operation