// Module included in the following assemblies:
//
// security/certificate_types_descriptions/ingress-certificates

:_mod-docs-content-type: REFERENCE
[id="ingress-certificates-expiration_{context}"]
= Ingress certificate expiration

[role="_abstract"]
Review fixed two-year expiration for Ingress Operator and `service-ca` certificates in {product-title} to plan maintenance before certificates expire.

The expiration terms for the Ingress Operator certificates are as follows:

* The expiration date for metrics certificates that the `service-ca` controller creates is two years after the date of creation.
* The expiration date for the Operator signing certificate is two years after the date of creation.
* The expiration date for default certificates that the Operator generates is two years after the date of creation.

You cannot specify custom expiration terms on certificates that the Ingress Operator or `service-ca` controller creates.

