firefly-helm-charts
firefly-helm-charts copied to clipboard
Configurable Certificate Expiry and Cert Renewal
With an old enough environment, DX's certs can expire when using cert-manager managed certificates. cert-manager automatically renews the cert but there's then a few challenges:
- Having DX pod be aware of the renewed cert and restarting
- Using the appropriate FF APIs to have the new DX cert be broadcasted out to everyone in the network
First step, is we could let the expiry time of the cert be configurable in case folks want their certs to last longer than the default 3 months. And then, we'll need to figure out what combination of sidecars, annotations, and Jobs need to be put in place to solve the above.