[go: up one dir, main page]

Skip to content

Increase life span of self-signed certificate for Registry

Summary

By default we create a self-signed cert for the registry secret in shared_secrets/templates/_generate_secrets.sh, however that certificate is issued with a 30-day expiration as currently written. We then only check to see if the secret exists going forward, and have no circuitry to generate a new certificate if the current one is expired.

Customer ticket: https://gitlab.zendesk.com/agent/tickets/112152

Helm 3 customer

Edited by Hossein Pursultani