canonical / charmed-magma-orchestrator Goto Github PK

Describe the bug
Self signed certificates are created with 365 days validation, even using certificate-validity option

To Reproduce
Steps to reproduce the behavior:

1. Create the overlay file with the certificate-validity option (example):
   applications:
   orc8r-certifier:
   options:
   domain: orc8r.int
   orc8r-nginx:
   options:
   domain: orc8r.int
   tls-certificates-operator:
   options:
   certificate-validity: 700
   generate-self-signed-certificates: true
   ca-common-name: rootca.orc8r.int

2. Deploy

3. Check generated certificates.

Expected behavior
The certification validity should be, if used the above example, 700 days.

Logs

 openssl x509 -in test.crt -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a0:00:e5:92:e1:16:43:71:71:5b:9e:42:8d:da:c4:44:6d:b3:41
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C = US, CN = rootca.orc8r.int
        Validity
            Not Before: May 25 03:24:05 2023 GMT
            Not After : May 24 03:24:05 2024 GMT
        Subject: C = US, CN = rootca.orc8r.int
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)

Environment

• Magma version: [1.8]
• Juju version: [3.2]
• Cloud Environment [Standard kubernetes)]
• Kubernetes version [e.g. 1.26.5]