djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b1ea04b036
ContainerImage.Pinniped/pkg/config/testdata/invalid-duration-renew-before.yaml

6 lines
86 B
YAML
Raw Normal View History

Allow override of discovery URL via ConfigMap Signed-off-by: Andrew Keesler <akeesler@vmware.com> - Seems like the next step is to allow override of the CA bundle; I didn't do that here for simplicity of the commit, but seems like it is the right thing to do in the future.
2020-08-03 14:17:11 +00:00
---
Use duration and renewBefore to control API cert rotation These configuration knobs are much more human-understandable than the previous percentage-based threshold flag. We now allow users to set the lifetime of the serving cert via a ConfigMap. Previously this was hardcoded to 1 year. Signed-off-by: Andrew Keesler <akeesler@vmware.com>
2020-08-20 19:17:18 +00:00
api:
servingCertificate:
durationSeconds: 2400
renewBeforeSeconds: 3600
Reference in New Issue Copy Permalink