{"action":"opened","issue":{"url":"https://api.github.com/repos/Financial-Times/content-k8s-provisioner/issues/217","repository_url":"https://api.github.com/repos/Financial-Times/content-k8s-provisioner","labels_url":"https://api.github.com/repos/Financial-Times/content-k8s-provisioner/issues/217/labels{/name}","comments_url":"https://api.github.com/repos/Financial-Times/content-k8s-provisioner/issues/217/comments","events_url":"https://api.github.com/repos/Financial-Times/content-k8s-provisioner/issues/217/events","html_url":"https://github.com/Financial-Times/content-k8s-provisioner/issues/217","id":306909693,"number":217,"title":"Generate proper TLS keys for our k8s clusters","user":{"login":"efinlay24","id":11923897,"avatar_url":"https://avatars3.githubusercontent.com/u/11923897?v=4","gravatar_id":"","url":"https://api.github.com/users/efinlay24","html_url":"https://github.com/efinlay24","followers_url":"https://api.github.com/users/efinlay24/followers","following_url":"https://api.github.com/users/efinlay24/following{/other_user}","gists_url":"https://api.github.com/users/efinlay24/gists{/gist_id}","starred_url":"https://api.github.com/users/efinlay24/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/efinlay24/subscriptions","organizations_url":"https://api.github.com/users/efinlay24/orgs","repos_url":"https://api.github.com/users/efinlay24/repos","events_url":"https://api.github.com/users/efinlay24/events{/privacy}","received_events_url":"https://api.github.com/users/efinlay24/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-20T15:13:54Z","updated_at":"2018-03-20T15:13:54Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"From the kube-aws docs:\r\n\r\n> PRODUCTION NOTE: the TLS keys and certificates generated by kube-aws should not be used to deploy a production Kubernetes cluster. Each component certificate is only valid for 90 days, while the CA is valid for 365 days. If deploying a production Kubernetes cluster, consider establishing PKI independently of this tool first. Read more below.\r\n\r\nhttps://kubernetes-incubator.github.io/kube-aws/getting-started/step-2-render.html#render-cluster-assets\r\n\r\n---\r\n\r\nhttps://trello.com/c/qq0XofH8/16-generate-proper-tls-keys-for-our-k8s-clusters"}}
{"actor":{"display_login":"efinlay24"}}