Tinkerbell.Sandbox/deploy/tls/ca-config.json

{
  "signing": {
    "default": {
      "expiry": "168h"
    },
    "profiles": {
      "server": {
        "expiry": "8760h",
        "usages": ["signing", "key encipherment", "server auth"]
      },
      "signing": {
        "expiry": "8760h",
        "usages": ["signing", "key encipherment"]
      }
    }
  }
}