20953: Adjust Let's Encrypt based cert thresholds. 20953-installer-tls-cert-monitoring
authorLucas Di Pentima <lucas.dipentima@curii.com>
Thu, 26 Oct 2023 13:31:45 +0000 (10:31 -0300)
committerLucas Di Pentima <lucas.dipentima@curii.com>
Thu, 26 Oct 2023 13:31:45 +0000 (10:31 -0300)
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>

tools/salt-install/common.sh

index 360c2c7cc37d2cf8a75824807300cc67ac1af908..5392da71be938c372cfdee0493a864596cb19d29 100644 (file)
@@ -52,8 +52,8 @@ done
 TLS_EXPIRATION_YELLOW=5184000 # > 2 months
 TLS_EXPIRATION_GREEN=15552000 # > 6 months
 if [[ "${SSL_MODE}" == "lets-encrypt" ]]; then
-  TLS_EXPIRATION_YELLOW=2592000 # > 1 months
-  TLS_EXPIRATION_GREEN=5184000 # > 2 months
+  TLS_EXPIRATION_YELLOW=1900800 # > 22 days
+  TLS_EXPIRATION_GREEN=2505600 # > 29 days
 fi
 
 # Auto-detects load-balancing mode