make the webhook expire days longer (#374)

GoogleCloudPlatform · Nov 26, 2020 · 55bc0de · 55bc0de
1 parent 4f421e7
commit 55bc0de
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/helm-chart/flink-operator/templates/generate-cert.yaml b/helm-chart/flink-operator/templates/generate-cert.yaml
@@ -35,7 +35,7 @@ data:
     openssl req -nodes -new -x509 -keyout ca.key -out ca.crt -subj "/CN=Admission Controller Webhook CA"
     openssl genrsa -out ${tmpdir}/server-key.pem 2048
     openssl req -new -key ${tmpdir}/server-key.pem -subj "/CN=${service}.${namespace}.svc" -config ${tmpdir}/csr.conf \
-        | openssl x509 -req -CA ca.crt -CAkey ca.key -CAcreateserial -out ${tmpdir}/server-cert.pem
+        | openssl x509 -days 3650 -req -CA ca.crt -CAkey ca.key -CAcreateserial -out ${tmpdir}/server-cert.pem
     serverCert="$(openssl base64 -A -in ${tmpdir}/server-cert.pem)"
     if [[ -z ${serverCert} ]]; then
         echo "ERROR: The signed certificate did not appear." >&2