diff --git a/pkg/asset/tls/kubeletcertkey.go b/pkg/asset/tls/kubeletcertkey.go index 7da2c4cd28e..298292b3d78 100644 --- a/pkg/asset/tls/kubeletcertkey.go +++ b/pkg/asset/tls/kubeletcertkey.go @@ -32,7 +32,7 @@ func (a *KubeletCertKey) Generate(dependencies asset.Parents) error { Subject: pkix.Name{CommonName: "system:serviceaccount:openshift-machine-config-operator:node-bootstrapper", Organization: []string{"system:serviceaccounts:openshift-machine-config-operator"}}, KeyUsages: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature, ExtKeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}, - Validity: ValidityThirtyMinutes, + Validity: ValidityTenYears, } return a.CertKey.Generate(cfg, kubeCA, "kubelet", DoNotAppendParent)