ContainerImage.Pinniped/pkg/config/testdata/invalid-duration-renew-before.yaml

---
webhook:
  url: https://tuna.com/fish?marlin
  caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tLi4u
api:
  servingCertificate:
    durationSeconds: 2400
    renewBeforeSeconds: 3600
Allow override of discovery URL via ConfigMap Signed-off-by: Andrew Keesler <akeesler@vmware.com> - Seems like the next step is to allow override of the CA bundle; I didn't do that here for simplicity of the commit, but seems like it is the right thing to do in the future. 2020-08-03 14:17:11 +00:00			`---`
			`webhook:`
			`url: https://tuna.com/fish?marlin`
			`caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tLi4u`
Use duration and renewBefore to control API cert rotation These configuration knobs are much more human-understandable than the previous percentage-based threshold flag. We now allow users to set the lifetime of the serving cert via a ConfigMap. Previously this was hardcoded to 1 year. Signed-off-by: Andrew Keesler <akeesler@vmware.com> 2020-08-20 19:17:18 +00:00			`api:`
			`servingCertificate:`
			`durationSeconds: 2400`
			`renewBeforeSeconds: 3600`