Browse Source

Merge pull request #500 from jim-minter/fix-etcd-ca-lifetime

Make CA lifetime 365 days, not 30
Brenton Leanhardt 9 years ago
parent
commit
922b87ede6
1 changed files with 1 additions and 0 deletions
  1. 1 0
      roles/etcd_ca/tasks/main.yml

+ 1 - 0
roles/etcd_ca/tasks/main.yml

@@ -37,6 +37,7 @@
     openssl req -config openssl.cnf -newkey rsa:4096
     -keyout ca.key -new -out ca.crt -x509 -extensions etcd_v3_ca_self
     -batch -nodes -subj /CN=etcd-signer@{{ ansible_date_time.epoch }}
+    -days 365
   args:
     chdir: "{{ etcd_ca_dir }}"
     creates: "{{ etcd_ca_dir }}/ca.crt"