<p>I want to customize the certificate validity duration and renewal throughout the cluster. Iguess doing that with ClusterIssuer is feasible. Is there a way to do so ?</p>

<p>You can specify the duration of a self signed certificate by specifying the <code>duration</code> field in the <code>Certificate</code> CR:</p>
<pre class="lang-yaml prettyprint-override"><code>apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: example
spec:
  duration: 24h
  ...
</code></pre>
<p>You can control how long before the certificate expires it gets renewed using the <code>renewBefore</code> field:</p>
<pre class="lang-yaml prettyprint-override"><code>apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: example
spec:
  renewBefore: 12h
...
</code></pre>
<p>Details in <a href="https://docs.cert-manager.io/en/release-0.8/reference/certificates.html#certificate-duration-and-renewal-window" rel="nofollow noreferrer">the documentation</a>.</p>
