kds-cache: adjust cache expiration time to 9 months

edgelesssys · Dec 17, 2024 · c52701b · c52701b
1 parent 1955338
commit c52701b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/coordinator/internal/authority/credentials.go b/coordinator/internal/authority/credentials.go
@@ -36,7 +36,8 @@ type Credentials struct {
 
 // Credentials creates new transport credentials that validate peers according to the latest manifest.
 func (a *Authority) Credentials(reg *prometheus.Registry, issuer atls.Issuer) (*Credentials, func()) {
-	ticker := clock.RealClock{}.NewTicker(24 * time.Hour)
+	month := 30 * 24 * time.Hour
+	ticker := clock.RealClock{}.NewTicker(9 * month)
 	kdsGetter := certcache.NewCachedHTTPSGetter(memstore.New[string, []byte](), ticker, logger.NewNamed(a.logger, "kds-getter"))
 	attestationFailuresCounter := promauto.With(reg).NewCounter(prometheus.CounterOpts{
 		Subsystem: "contrast_meshapi",