Extend pod webhook self-signed certs expiration date to 99 years in t…

…he future (#535) Signed-off-by: Eduardo Apolinario <[email protected]> Co-authored-by: Eduardo Apolinario <[email protected]>
flyteorg · Mar 6, 2023 · 328a41c · 328a41c
1 parent 3c3ec33
commit 328a41c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/webhook/init_cert.go b/pkg/webhook/init_cert.go
@@ -162,7 +162,7 @@ func createCerts(serviceName string, serviceNamespace string) (certs webhookCert
 			Organization: []string{"flyte.org"},
 		},
 		NotBefore:             time.Now(),
-		NotAfter:              time.Now().AddDate(1, 0, 0),
+		NotAfter:              time.Now().AddDate(99, 0, 0),
 		IsCA:                  true,
 		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth, x509.ExtKeyUsageServerAuth},
 		KeyUsage:              x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
@@ -204,7 +204,7 @@ func createCerts(serviceName string, serviceNamespace string) (certs webhookCert
 			Organization: []string{"flyte.org"},
 		},
 		NotBefore:    time.Now(),
-		NotAfter:     time.Now().AddDate(1, 0, 0),
+		NotAfter:     time.Now().AddDate(99, 0, 0),
 		SubjectKeyId: []byte{1, 2, 3, 4, 6},
 		ExtKeyUsage:  []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth, x509.ExtKeyUsageServerAuth},
 		KeyUsage:     x509.KeyUsageDigitalSignature,