Uploaded image for project: 'Percona Operator for MongoDB'
  1. Percona Operator for MongoDB
  2. K8SPSMDB-574

Set certificate duration for external certificates to 100 years

Details

    • Improvement
    • Status: Done
    • Medium
    • Resolution: Fixed
    • None
    • 1.12.0
    • None
    • None
    • Yes
    • Yes
    • Yes

    Description

      We are going to allow user to choose the validity duration of the external certificate for cert manager. Right now it is 90 days, which might be suboptimal for some deployments. 

      Community PR (https://github.com/percona/percona-server-mongodb-operator/pull/779) is great, but it sets default duration to 100 years, which is not aligned with security best practices. 

       

      We are going to add a new section

      spec:
        tls:

      Under it we are going to have 

      spec:
        tls:
          certValidityDuration: 
      • Measured in days.
      • 90 days is default

      Attachments

        Activity

          People

            dmitriy.kostiuk Dmitriy Kostiuk
            ege.gunes Ege Gunes
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Smart Checklist