From 427b2c4bc5f13c7597f8b47cb130a5a783ed3f94 Mon Sep 17 00:00:00 2001 From: "ohotnikov.ivan" Date: Thu, 27 Nov 2025 23:34:47 +0300 Subject: [PATCH] Helm Charts: add certificate duration and renewBefore options Signed-off-by: ohotnikov.ivan --- k8s/charts/seaweedfs/templates/cert/ca-cert.yaml | 6 ++++++ k8s/charts/seaweedfs/values.yaml | 2 ++ 2 files changed, 8 insertions(+) diff --git a/k8s/charts/seaweedfs/templates/cert/ca-cert.yaml b/k8s/charts/seaweedfs/templates/cert/ca-cert.yaml index 0fd6615e1..0420a52eb 100644 --- a/k8s/charts/seaweedfs/templates/cert/ca-cert.yaml +++ b/k8s/charts/seaweedfs/templates/cert/ca-cert.yaml @@ -13,6 +13,12 @@ spec: secretName: {{ template "seaweedfs.name" . }}-ca-cert commonName: "{{ template "seaweedfs.name" . }}-root-ca" isCA: true + {{- if .Values.certificates.duration }} + duration: {{ .Values.certificates.duration }} + {{- end }} + {{- if .Values.certificates.renewBefore }} + renewBefore: {{ .Values.certificates.renewBefore }} + {{- end }} issuerRef: name: {{ template "seaweedfs.name" . }}-issuer kind: Issuer diff --git a/k8s/charts/seaweedfs/values.yaml b/k8s/charts/seaweedfs/values.yaml index 1bfe5c72c..66c893bc2 100644 --- a/k8s/charts/seaweedfs/values.yaml +++ b/k8s/charts/seaweedfs/values.yaml @@ -22,6 +22,8 @@ global: serviceAccountName: "seaweedfs" automountServiceAccountToken: true certificates: + duration: 87600h + renewBefore: 720h alphacrds: false monitoring: enabled: false