Merge pull request #649 from wzshiming/fix/get-kubeconfig

kubernetes-sigs · Jun 12, 2023 · 6d51ec0 · 6d51ec0
2 parents 9fdece7 + 681faa3
commit 6d51ec0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pkg/kwokctl/cmd/get/kubeconfig/kubeconfig.go b/pkg/kwokctl/cmd/get/kubeconfig/kubeconfig.go
@@ -133,7 +133,7 @@ func runE(ctx context.Context, flags *flagpole) error {
 
 		// Sign admin cert and key
 		now := time.Now()
-		notBefore := now.UTC()
+		notBefore := now.Add(-24 * time.Hour).UTC()
 		notAfter := now.Add(pki.CertificateValidity).UTC()
 		cert, key, err := pki.GenerateSignCert(flags.User, caCert, caKey, notBefore, notAfter, flags.Groups, nil)
 		if err != nil {

diff --git a/pkg/kwokctl/pki/pki.go b/pkg/kwokctl/pki/pki.go
@@ -48,7 +48,7 @@ var (
 // GeneratePki generates the pki for kwokctl
 func GeneratePki(pkiPath string, sans ...string) error {
 	now := time.Now()
-	notBefore := now.UTC()
+	notBefore := now.Add(-24 * time.Hour).UTC()
 	notAfter := now.Add(CertificateValidity).UTC()
 
 	// Generate CA