From 7745d519f37b1bd966d7815363b711e5a3f88297 Mon Sep 17 00:00:00 2001 From: Luluda <1425307234@qq.com> Date: Sun, 22 Dec 2019 18:35:07 +0800 Subject: [PATCH] zh-translation: /blog/2019/root-transition/index.md #1136 (#6168) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * feat: trans 1136 * fix空格、链接 * cancel translate keywords Co-authored-by: luluxiang --- content/zh/blog/2019/root-transition/index.md | 16 +++++----------- 1 file changed, 5 insertions(+), 11 deletions(-) diff --git a/content/zh/blog/2019/root-transition/index.md b/content/zh/blog/2019/root-transition/index.md index 752c547b03..316aa7987c 100644 --- a/content/zh/blog/2019/root-transition/index.md +++ b/content/zh/blog/2019/root-transition/index.md @@ -1,22 +1,16 @@ --- -title: Extending Istio Self-Signed Root Certificate Lifetime -description: Learn how to extend the lifetime of Istio self-signed root certificate. +title: 延长 Istio 自签名根证书的有效期 +description: 了解如何延长 Istio 自签名根证书的有效期。 publishdate: 2019-06-07 attribution: Oliver Liu keywords: [security, PKI, certificate, Citadel] target_release: 1.1 --- -Istio self-signed certificates have historically had a 1 year default lifetime. -If you are using Istio self-signed certificates, -you need to schedule regular root transitions before they expire. -An expiration of a root certificate may lead to an unexpected cluster-wide outage. -The issue affects new clusters created with versions up to 1.0.7 and 1.1.7. +Istio 自签名证书的默认有效期为 1 年。如果您正在使用 Istio 自签名证书，您需要在到期前安排定期根转换。根证书到期可能会导致整个群集意外中断。此问题会影响使用 1.0.7 和 1.1.7 版本创建的新群集。 -See [Extending Self-Signed Certificate Lifetime](/zh/docs/ops/configuration/security/root-transition/) for -information on how to gauge the age of your certificates and how to perform rotation. +有关如何判断证书年龄和如何执行轮换的信息，请参见[延长 Istio 自签名证书的有效期](/zh/docs/ops/configuration/security/root-transition/)。 {{< tip >}} -We strongly recommend you rotate root keys and root certificates annually as a security best practice. -We will send out instructions for root key/cert rotation soon. +我们强烈建议您每年轮换根密钥和根证书作为最佳安全实践。我们将尽快发出有关根密钥/证书轮换的说明。 {{< /tip >}}