certs are only valid for a few months.

cloudfoundry / concourse-infra-for-fiwg

This repo holds the deployment tooling used to deploy a Concourse instance for the Foundation Infrastructure Working Group

2 stars 7 forks source link

certs are only valid for a few months. #57

Closed ramonskie closed 2 years ago

ramonskie commented 2 years ago

certificates are only valid for 3 months even if you set 10 year. the secret manager quarks has been discontinued. so we need to either revive this project. or find an alternative for our secrets and certs

ramonskie commented 2 years ago

candidates?

ramonskie commented 2 years ago

more issues found with quarks-secret. it seems its using a deprecated api see https://kubernetes.io/docs/reference/using-api/deprecation-guide/#certificatesigningrequest-v122 and https://github.com/cloudfoundry-incubator/quarks-secret/search?q=v1beta1

ramonskie commented 2 years ago

investigate https://github.com/vmware-tanzu/carvel-secretgen-controller

this seems to be a good replacement. but we need to wait for the following https://github.com/vmware-tanzu/carvel-secretgen-controller/issues/70 see also https://kubernetes.slack.com/archives/CH8KCCKA5/p1657197288034929

ramonskie commented 2 years ago

we moved to carvel for generating our secrets and certs