From d3c04a5ba75f1a9650306cd2d02d4d5eaa3a6ea3 Mon Sep 17 00:00:00 2001 From: Tao Li Date: Wed, 1 Aug 2018 17:10:37 -0700 Subject: [PATCH] Fix an error in faq page (#2120) --- content/help/faq/security/cert-lifetime-config.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/help/faq/security/cert-lifetime-config.md b/content/help/faq/security/cert-lifetime-config.md index f8deebeccb..7669af9f5c 100644 --- a/content/help/faq/security/cert-lifetime-config.md +++ b/content/help/faq/security/cert-lifetime-config.md @@ -8,7 +8,7 @@ For the workloads running in Kubernetes, the lifetime of their Istio certificate `max-workload-cert-ttl` of Citadel. Citadel uses a flag `max-workload-cert-ttl` to control the maximum lifetime for Istio certificates issued to -workloads. The default value is 7 days. If `workload-cert-ttl` on Citadel or node agent is greater than +workloads. The default value is 90 days. If `workload-cert-ttl` on Citadel or node agent is greater than `max-workload-cert-ttl`, Citadel will fail issuing the certificate. Modify the `istio-demo-auth.yaml` file to customize the Citadel configuration.