diff --git a/modules/concepts/pages/operations/temporary_credentials_lifetime.adoc b/modules/concepts/pages/operations/temporary_credentials_lifetime.adoc index a3f529e9e..a0d9af248 100644 --- a/modules/concepts/pages/operations/temporary_credentials_lifetime.adoc +++ b/modules/concepts/pages/operations/temporary_credentials_lifetime.adoc @@ -8,7 +8,17 @@ Currently the only temporary credentials are TLS certificates. Many products use TLS to secure the communications, often times customers use the xref:secret-operator:secretclass.adoc#backend-autotls[secret-operator autoTls] backend to create TLS certificates for the Pods on the fly. -To increase security, these temporary credentials have a short lifetime by default, which will result in e.g. Trino coordinator Pods restarting every ~24 hours (minus some safety buffer) to avoid using expired certificates. +To increase security, most of the products temporary credentials have a short lifetime by default, which will result in e.g. Kafka brokers restarting every ~24 hours (minus some safety buffer) to avoid using expired certificates. + +All products will have a default temporary secret lifetime of `24h` with the exception of the following Pods: + +[cols="2,1"] +|=== +|Pods | Default lifetime + +|Trino coordinators +| 15d +|=== == Configure the lifetime