diff --git a/rust/crd/src/lib.rs b/rust/crd/src/lib.rs
index c889b4fc..135202e5 100644
--- a/rust/crd/src/lib.rs
+++ b/rust/crd/src/lib.rs
@@ -439,7 +439,7 @@ pub struct KafkaConfig {
 
 impl KafkaConfig {
     // Auto TLS certificate lifetime
-    const DEFAULT_BROKER_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(7);
+    const DEFAULT_BROKER_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(1);
 
     pub fn default_config(cluster_name: &str, role: &KafkaRole) -> KafkaConfigFragment {
         KafkaConfigFragment {