self-hosting/roles/kubernetes-ca/templates/ca-config.json.j2

{
  "signing": {
    "default": {
      "expiry": "{{ ca_expiry }}"
    },
    "profiles": {
      "kubernetes": {
         "usages": [
            "signing",
            "key encipherment",
            "server auth",
            "client auth"
          ],
          "expiry": "{{ ca_expiry }}"
      }
    }
  }
}