Certificates
============

Certificate duration and renewal
--------------------------------

The duration of certificates created by Yaook operators defaults to 3 days which is configured inside the variable ``OpCommonConfig.certificate_lifetime_days`` of ``.yaook/common/__init__.py``.
This duration can be overridden by setting the environment variable ``YAOOK_OP_CERTIFICATE_LIFETIME_DAYS`` of the infra-operator to a value surrounded by double quotes.
Certificates are renewed before one third of the configured lifetime.