Don't refresh postgres ca (until leaf are automatically refreshed)

2025-12-05 23:06:23 +00:00 · 2025-09-21 20:28:44 +02:00
parent 31b4344895
commit 30d027e764
2 changed files with 1 additions and 1 deletions
--- a/apps/postgres/ca.yaml
+++ b/apps/postgres/ca.yaml
@@ -11,6 +11,7 @@ spec:
  secretTemplate:
    labels:
      cnpg.io/reload: ""
+  duration: 87660h # 10 years, this is needed until https://github.com/cert-manager/cert-manager/issues/2478
  privateKey:
    algorithm: ECDSA
    size: 256
--- a/shell.nix
+++ b/shell.nix
@@ -9,7 +9,6 @@ pkgs.mkShell {
    cmctl
    kubectl-cnpg
    kubernetes-helm
-    kubectl-cnpg
  ];

  TALOSCONFIG = "./clusterconfig/talosconfig";