Glad you found it helpful! :-)

In terms of certs management, as per my understanding:

- if you use what Strimzi provides by default, renewal will be taken care of automatically (https://strimzi.io/docs/operators/master/using.html#security-str)

- in case custom certificates (which is the vast majority of the cases), the user is responsible for managing it

Let me know if it helped answer your question