Skip to content

Commit 82a0b7c

Browse files
authored
Document higher temporary secret lifetime of Trino coordinators (#701)
1 parent 800db72 commit 82a0b7c

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

modules/concepts/pages/operations/temporary_credentials_lifetime.adoc

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,17 @@
88
Currently the only temporary credentials are TLS certificates.
99

1010
Many products use TLS to secure the communications, often times customers use the xref:secret-operator:secretclass.adoc#backend-autotls[secret-operator autoTls] backend to create TLS certificates for the Pods on the fly.
11-
To increase security, these temporary credentials have a short lifetime by default, which will result in e.g. Trino coordinator Pods restarting every ~24 hours (minus some safety buffer) to avoid using expired certificates.
11+
To increase security, most of the products temporary credentials have a short lifetime by default, which will result in e.g. Kafka brokers restarting every ~24 hours (minus some safety buffer) to avoid using expired certificates.
12+
13+
All products will have a default temporary secret lifetime of `24h` with the exception of the following Pods:
14+
15+
[cols="2,1"]
16+
|===
17+
|Pods | Default lifetime
18+
19+
|Trino coordinators
20+
| 15d
21+
|===
1222

1323
== Configure the lifetime
1424

0 commit comments

Comments
 (0)