#2871 [BUG] Flyte pod webhook uses certs with a 1 year expiration New issue created by hamersaw Describe the bug Currently the flyte pod webhook, which is responsible for injecting secrets, creates a self signed cert with a 1 year expiration. This is problematic for long-running Flyte deployments because once the certificate expires all calls to the webhook will fail with "x509: certificate has expired or is not yet valid". As the

failurePolicy

on the mutating webhook configuration is set to

Ignore

by default this means that transparently secrets will stop getting injected - resulting in task failures. Expected behavior Secret injection should support a longer than 1 year lifetime. Additional context to reproduce Just have a really long running pod webhook deployment .. like really long ... and start to notice that secret injection doesn't work anymore. Screenshots No response Are you sure this issue hasn't been raised already? ☑︎ Yes Have you read the Code of Conduct? ☑︎ Yes flyteorg/flyte

uhho