Mark the vault certificates to be renewed 30 days before expiry

JoshVanL · JoshVanL · commit 941c61dd1e88 · 2019-08-05T16:47:48.000+01:00
Signed-off-by: JoshVanL &lt;vleeuwenjoshua@gmail.com&gt;
diff --git a/terraform/amazon/modules/vault/tls.tf b/terraform/amazon/modules/vault/tls.tf
@@ -65,6 +65,9 @@ resource "tls_locally_signed_cert" "vault" {
   # 1 year
   validity_period_hours = 8766
 
+  # mark the certificate for renewal 30 days before expiry
+  early_renewal_hours = 720
+
   allowed_uses = [
     "key_encipherment",
     "digital_signature",
