kedacore / charts

Helm charts for KEDA
Apache License 2.0
157 stars 224 forks source link

fix(cert-manager): Ensure there is at least one leaf certificate renewal when renewing the CA #712

Open tete17 opened 3 days ago

tete17 commented 3 days ago

The renewBefore value for the root ca was simply too low barely giving the leaf certificate any time to renew itself. This leads to the root ca expiring before the leaf certificates expires.

By removing the renewBefore values we go back to the 2/3 default and as long as the leaf certificate is only valid for half of the root it should be fine.

Provide a description of what has been changed

Checklist

Fixes #710