Skip to content

Commit ae535c6

Browse files
committed
Add renewBefore in docs / example code
1 parent fce799c commit ae535c6

3 files changed

Lines changed: 3 additions & 0 deletions

File tree

docs/usage/tutorials/gateway-api-gateways.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,7 @@ metadata:
5151
annotations:
5252
#cert.gardener.cloud/dnsnames: "*.example.com" # alternative if you want to control the dns names explicitly.
5353
cert.gardener.cloud/purpose: managed
54+
#cert.gardener.cloud/renew-before: "720h" # optional to specify when to renew the certificate before expiration (default: 720h/30 days, min: 5m, max: duration-5m)
5455
spec:
5556
gatewayClassName: istio
5657
listeners:

docs/usage/tutorials/istio-gateways.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,7 @@ metadata:
5555
cert.gardener.cloud/purpose: managed
5656
#cert.gardener.cloud/dnsnames: "*.example.com" # alternative if you want to control the dns names explicitly.
5757
#cert.gardener.cloud/secret-namespace: "istio-system" # optional to specify the namespace where the certificate secret should be created
58+
#cert.gardener.cloud/renew-before: "720h" # optional to specify when to renew the certificate before expiration (default: 720h/30 days, min: 5m, max: duration-5m)
5859
spec:
5960
selector:
6061
istio: ingressgateway # use Istio default gateway implementation

examples/40-ingress-echoheaders.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ metadata:
1919
#cert.gardener.cloud/private-key-algorithm: ECDSA # optional to specify algorithm for private key, allowed values are 'RSA' or 'ECDSA'
2020
#cert.gardener.cloud/private-key-size: "384" # optional to specify size of private key, allowed values for RSA are "2048", "3072", "4096" and for ECDSA "256" and "384"
2121
#cert.gardener.cloud/private-key-encoding: PKCS8 # optional to specify encoding for private key, allowed values are 'PKCS1' (default) or 'PKCS8'
22+
#cert.gardener.cloud/renew-before: 720h # optional to specify when to renew the certificate before expiration (default is 720h/30 days)
2223
# annotations needed when using DNSRecords
2324
#cert.gardener.cloud/dnsrecord-provider-type: aws-route53
2425
#cert.gardener.cloud/dnsrecord-secret-ref: myns/mysecret

0 commit comments

Comments
 (0)