[release-1.4] Enforce more checks on certConfig

[kubevirt-bot]

This is an automated cherry-pick of #1311:
enforce more checks on certConfig:

small values (< 1h) for the time fields should not be used
duration < renewBefore should not be set
ca.duration < server.duration should not be set
Fixes: https://bugzilla.redhat.com/1956245

/assign tiraboschi

Enforce more checks on certConfig

[tiraboschi]

/approve

[kubevirt-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: tiraboschi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [tiraboschi]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

[coveralls]

Pull Request Test Coverage Report for Build 809215740

• 27 of 29 (93.1%) changed or added relevant lines in 1 file are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.2%) to 70.62%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
pkg/webhooks/webhooks.go	27	29	93.1%

Totals
Change from base Build 804630251:	0.2%
Covered Lines:	2906
Relevant Lines:	4115

---

💛 - Coveralls

[tiraboschi]

/retest

[hco-bot]

hco-e2e-upgrade-index-azure lane succeeded.
/override ci/prow/hco-e2e-upgrade-index-aws
hco-e2e-image-index-azure lane succeeded.
/override ci/prow/hco-e2e-image-index-gcp
hco-e2e-image-index-azure lane succeeded.
/override ci/prow/hco-e2e-image-index-aws

[kubevirt-bot]

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-image-index-aws, ci/prow/hco-e2e-image-index-gcp, ci/prow/hco-e2e-upgrade-index-aws

In response to this:

hco-e2e-upgrade-index-azure lane succeeded.
/override ci/prow/hco-e2e-upgrade-index-aws
hco-e2e-image-index-azure lane succeeded.
/override ci/prow/hco-e2e-image-index-gcp
hco-e2e-image-index-azure lane succeeded.
/override ci/prow/hco-e2e-image-index-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci]

@kubevirt-bot: The following tests failed, say /retest to rerun all failed tests:

Test name	Commit	Details	Rerun command
ci/prow/hco-e2e-upgrade-index-aws	11971d7	link	/test hco-e2e-upgrade-index-aws
ci/prow/hco-e2e-image-index-aws	11971d7	link	/test hco-e2e-image-index-aws
ci/prow/hco-e2e-image-index-gcp	11971d7	link	/test hco-e2e-image-index-gcp
ci/prow/hco-e2e-kv-smoke-gcp	11971d7	link	/test hco-e2e-kv-smoke-gcp

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[hco-bot]

hco-e2e-kv-smoke-azure lane succeeded.
/override ci/prow/hco-e2e-kv-smoke-gcp

[kubevirt-bot]

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-kv-smoke-gcp

In response to this:

hco-e2e-kv-smoke-azure lane succeeded.
/override ci/prow/hco-e2e-kv-smoke-gcp

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.