Skip to content

Commit

Permalink
set default renewBefore for CA to one third of duration
Browse files Browse the repository at this point in the history
Signed-off-by: Jan Wozniak <[email protected]>
  • Loading branch information
wozniakjan authored Dec 4, 2024
1 parent ca8f2f4 commit 84f9906
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion keda/templates/cert-manager/self-ca.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,8 @@ spec:
privateKey:
algorithm: RSA
size: 2048
duration: 43800h0m0s # 5 years
duration: 43800h0m0s # 5 years
renewBefore: 14600h0m0s # 1.6 year, 1/3rd of the duration
issuerRef:
name: {{ .Values.operator.name }}-selfsigned-issuer
kind: Issuer
Expand Down

0 comments on commit 84f9906

Please sign in to comment.