Currently, the cluster status is failed after replacing certificates. This happens if the `blackbox_exporter` ca certificate is not configured to be the internak_ca certificate. This can be easily solved by replacing the CA cert path in `/etc/prometheus/exporters/blackbox.yml`.
The question is, which certificate should be placed there? the new internal CA cert or should we add another key (and there are a lot by now) to the replace-certificates config file.
Will be discussed tomorrow with