Skip to content
This repository has been archived by the owner on Oct 30, 2024. It is now read-only.

renew certs within Kubernetes secrets before they expire #112

Merged
merged 7 commits into from
Nov 17, 2017
Merged

renew certs within Kubernetes secrets before they expire #112

Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
bb35ccb
renew certs within Kubernetes secrets before they expire
xh3b4sd Nov 16, 2017
144bc24
threshold
xh3b4sd Nov 16, 2017
a0b2b7d
gofmt
xh3b4sd Nov 16, 2017
09954f6
renew in update
xh3b4sd Nov 16, 2017
faa062f
reverted error handling changes
xh3b4sd Nov 16, 2017
7eabafb
reverted create test changes
xh3b4sd Nov 16, 2017
d931315
threshold
xh3b4sd Nov 16, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
threshold
  • Loading branch information
@xh3b4sd
xh3b4sd committed Nov 16, 2017
commit d93131511f54087464c67c7da710dc4b63676cc0
2 changes: 1 addition & 1 deletion helm/cert-operator-chart/templates/configmap.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ data:
keyFile: ''
resource:
vaultCrt:
expirationThreshold: '15m'
expirationThreshold: '24h'
namespace: 'default'
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new settings are properly set in the config map. Note that the 24 hours is a magic number I just made up. IMO it should be good enough to let the cert-operator know 24 hours before the certificates expire that it should actually renew them in the Kubernetes secrets.

vault:
config:
Expand Down