move call to better spot

hashicorp · May 2, 2023 · 58e13d7 · 58e13d7
1 parent feab094
commit 58e13d7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/agent/connect/ca/provider_vault.go b/agent/connect/ca/provider_vault.go
@@ -438,6 +438,9 @@ func (v *VaultProvider) setupIntermediatePKIPath() error {
 		"require_cn":       false,
 	})
 
+	// enable auto-tidy with tidy_expired_issuers
+	v.autotidyIssuers(v.config.IntermediatePKIPath)
+
 	return err
 }
 
@@ -617,7 +620,6 @@ func (v *VaultProvider) GenerateLeafSigningCert() (string, error) {
 			return "", fmt.Errorf("failed to update default intermediate issuer: %w", err)
 		}
 	}
-	v.autotidyIssuers(v.config.IntermediatePKIPath)
 	return v.ActiveLeafSigningCert()
 }