Increase duration of CA certificate

This is a long shot, but perhaps it helps resolving the issue of the secret not being updated when cert-manager renews a certificate. The idea is taken from: cert-manager/cert-manager#5851 (comment)
utilitywarehouse · Jan 10, 2025 · 2a4d1aa · 2a4d1aa
1 parent 2fd6955
commit 2a4d1aa
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/cockroachdb/manifests-cert-manager/certificates.yaml b/cockroachdb/manifests-cert-manager/certificates.yaml
@@ -20,6 +20,8 @@ spec:
     name: cockroachdb-selfsigned-issuer
     kind: Issuer
     group: cert-manager.io
+  duration: 4320h # 6 months
+  renewBefore: 2160h # 3 months
 ---
 apiVersion: cert-manager.io/v1
 kind: Issuer