vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

agent store leaf: 7 days instead of 90

Browse source
This commit is contained in:
atlas 2026-10-25 01:55:59 +02:00
commit 4d9b7e0ca9
4 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

8
swarm-controller/src/agent_renewal.rs
View file

@ -39,9 +39,9 @@ use x509_cert::der::DecodePem as _;
use crate::wanted::WantedWriter;
/// Age at which a queue secret is re-minted: half the agent certificate's
/// 90-day life (`agentPkiLeafTtl` in `swarm-bao.nix`), so the two renew on one
/// cadence.
/// Age at which a queue secret is re-minted. Independent of the agent
/// certificate's life (`agentPkiLeafTtl` in `swarm-bao.nix`), which renews at
/// half its own validity.
pub const SECRET_RENEW_AFTER: std::time::Duration = std::time::Duration::from_hours(45 * 24);
/// How often [`spawn`] re-checks every agent. Also the longest it waits for
@ -435,7 +435,7 @@ mod tests {
const DAY: i64 = 86_400;
/// Self-signed, CN `hive-agent-atlas`, valid 2026-01-01T00:00:00Z to
/// 2026-04-01T00:00:00Z: 90 days, the agent role's `ttl`. Its key was
/// 2026-04-01T00:00:00Z: 90 days, a window the agent role no longer issues. Its key was
/// discarded.
const CERT_PEM: &str = "-----BEGIN CERTIFICATE-----
MIIBizCCATGgAwIBAgIUSFpuYmy1UoHvq/MYiyrAudRaWXcwCgYIKoZIzj0EAwIw