Modify certificate

osinfra-io · Sep 28, 2024 · de35e8d · de35e8d
1 parent e98d63e
commit de35e8d
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/regional/main.tf b/regional/main.tf
@@ -468,14 +468,18 @@ resource "kubernetes_manifest" "istio_gateway_tls" {
     spec = {
       commonName = "istio.osinfra.io"
       dnsNames   = ["*"]
+      duration   = "2160h"
+      isCA       = false
 
       issuerRef = {
         name  = "istio-ca"
         kind  = "Issuer"
         group = "cert-manager.io"
       }
 
-      secretName = "istio-gateway-tls"
+      renewBefore = "360h"
+      secretName  = "istio-gateway-tls"
+      usages      = ["server auth"]
     }
   }
 }