Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(cert-manager): Ensure there is at least one leaf certificate renewal when renewing the CA #712

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(cert-manager): Ensure there is at least one leaf certificate renewal when renewing the CA #712

wants to merge 1 commit into from
+1 −2

Commits on Dec 1, 2024

  1. fix(cert-manager): Ensure there is at least one leaf certificate rene… 

    …wal when renewing the CA

The renewBefore value for the root ca was simply too low barely giving the leaf certificate any time
to renew itself. This leads to the root ca expiring before the leaf certificates expires.

By removing the renewBefore values we go back to the 2/3 default and as long as the leaf certificate
is only valid for half of the root it should be fine.

Signed-off-by: Miguel Sacristán Izcue <[email protected]>
    @tete17
    tete17 committed Dec 1, 2024
    Configuration menu
    Copy the full SHA
    ca8f2f4 View commit details
    Browse the repository at this point in the history