Set etcd cert validity to 2 hours

openshift · Jun 24, 2024 · 7b4e87f · 7b4e87f
1 parent 0a00f2a
commit 7b4e87f
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/pkg/tlshelpers/tlshelpers.go b/pkg/tlshelpers/tlshelpers.go
@@ -26,10 +26,10 @@ const (
 	// Given that clusters can be shutdown/hibernated for a max of ~9 months
 	// this validity period leaves enough cushion to not have the
 	// certs expire during shutdown/hibernation in the worst case.
-	EtcdCertValidity          = 3 * 365 * 24 * time.Hour
-	EtcdCertValidityRefresh   = 2.2 * 365 * 24 * time.Hour
-	EtcdCaCertValidity        = 5 * 365 * 24 * time.Hour
-	EtcdCaCertValidityRefresh = 4.2 * 365 * 24 * time.Hour
+	etcdCertValidity          = 2 * time.Hour
+	etcdCertValidityRefresh   = 70 * time.Minute
+	etcdCaCertValidity        = 3 * time.Hour
+	etcdCaCertValidityRefresh = 100 * time.Minute
 
 	EtcdJiraComponentName                  = "etcd"
 	EtcdSignerCertSecretName               = "etcd-signer"