Jerome Petazzoni
1932647552
The current wording of the documentation suggests that the duration/expiration of the certificates can be changed by asking a specific time in the CSR. While it's technically possible to specify a duration (e.g. as a custom annotation), there is no agreed-upon method to do so, and the built-in signer uses a fixed expiration time anyway. This clarifies the situation. See kubernetes/kubernetes#92678 for discussion. Signed-off-by: Jerome Petazzoni <jerome.petazzoni@gmail.com>