ipsec-ca-valid-10-years-node-cert-5-years

Status: IN

CNO generates a self-signed X.509 CA valid for 10 years; node certificates are valid for 5 years and auto-rotated after 4.5 years.

Source: entries/2026/03/05/en-documentation-openshift_container_platform-417-html-network_security-configur.md