Issue certificates with NotBefore set 1 day prior to avoid timezone i…

…ssues in VM (signed certs)
kubernetes · May 21, 2018 · 658a4a5 · 658a4a5
1 parent 208ea8f
commit 658a4a5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/util/crypto.go b/pkg/util/crypto.go
@@ -92,7 +92,7 @@ func GenerateSignedCert(certPath, keyPath, cn string, ips []net.IP, alternateDNS
 			CommonName:   cn,
 			Organization: []string{"system:masters"},
 		},
-		NotBefore: time.Now().Add(time.Hour * -1),
+		NotBefore: time.Now().Add(time.Hour * -24),
 		NotAfter:  time.Now().Add(time.Hour * 24 * 365),
 
 		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,