Skip to content
This repository has been archived by the owner on Oct 9, 2023. It is now read-only.

Extend pod webhook self-signed certs expiration date to 99 years in the future #535

Conversation

eapolinario
Copy link
Contributor

TL;DR

1 year self-signed certs are not enough

Type

  • Bug Fix
  • Feature
  • Plugin

Are all requirements met?

  • Code completed
  • Smoke tested
  • Unit tests added
  • Code documentation added
  • Any pending items have an associated Issue

Complete description

Tracking Issue

fixes flyteorg/flyte#2871

Follow-up issue

NA

@codecov
Copy link

codecov bot commented Mar 4, 2023

Codecov Report

Merging #535 (6255c02) into master (3c3ec33) will increase coverage by 0.45%.
The diff coverage is 0.00%.

❗ Current head 6255c02 differs from pull request most recent head 0abbdb8. Consider uploading reports for the commit 0abbdb8 to get more accurate results

Copy link
Contributor

@EngHabu EngHabu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to account for the already issued certificates in the wild?
Perhaps an intuitive way to renew them (manually) and docs?

@eapolinario
Copy link
Contributor Author

Do we need to account for the already issued certificates in the wild? Perhaps an intuitive way to renew them (manually) and docs?

These certs are created during startup (and currently we've had 2 instances of users who hit this in the wild). It's worth a q-a github discussion explaining how to get rid of this error (i.e. restart the flyte pod webhook).

@eapolinario eapolinario merged commit 328a41c into master Mar 6, 2023
@eapolinario eapolinario deleted the extend-webhook-self-signed-cert-expiration-date-to-99-years branch March 6, 2023 21:02
eapolinario added a commit to eapolinario/flytepropeller that referenced this pull request Aug 9, 2023
…he future (flyteorg#535)

Signed-off-by: Eduardo Apolinario <[email protected]>
Co-authored-by: Eduardo Apolinario <[email protected]>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[BUG] Flyte pod webhook uses certs with a 1 year expiration
3 participants