Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extend cert time for a year in case of OKD #661

Open
praveenkumar opened this issue Mar 7, 2023 · 2 comments
Open

Extend cert time for a year in case of OKD #661

praveenkumar opened this issue Mar 7, 2023 · 2 comments

Comments

@praveenkumar
Copy link
Member

Right now our OKD bundles have cert validity is only 30days but on OCP side we now have 1 year after patching KCMO/KAO images and generating a new release on quay.io . We should do same for OKD side, need to check with OKD community how those releases generated and try to create same script which we have for OCP to extend the cert with patched images.

@praveenkumar
Copy link
Member Author

As per internal discussion with community member looks like OKD bits are completely generated from the CI ( no brew/koji involved) so to we have to generate those patched images locally and push it. we can discuss it here if there is some better solution for it.

@cfergeau
Copy link
Contributor

As per internal discussion with community member looks like OKD bits are completely generated from the CI ( no brew/koji involved) so to we have to generate those patched images locally and push it.

Not sure what you mean by "locally", but the patched images could be built directly on quay, or through a github action, or even on brew/koji if we want to. They don't have to be built on a local machine and pushed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants