kubecerts: only randomly select certs for renew in case they are old
If a certificate has a short lifetime, then don't randomly select it for renew.
Bug: T365681 Signed-off-by: Arturo Borrero Gonzalez aborrero@wikimedia.org
How to register an account on GitLab. Due to spam, new accounts are locked until approved by an admin or the approver bot. Your GitLab account gets automatically approved within one hour if you are a member of Trusted Contributors in Gerrit, or a member of the Trusted-Contributors group in Phabricator and linked your Developer account to your Phabricator account. If none of these apply, you can file an unlock request to expedite access.
Take the 2024 Developer Satisfaction Survey (privacy statement) to help identify areas for improvement and measure satisfaction within the Wikimedia developer community.
Support: mw:GitLab, how to host a project on GitLab, #wikimedia-gitlab on libera.chat, #GitLab on Phabricator.
If a certificate has a short lifetime, then don't randomly select it for renew.
Bug: T365681 Signed-off-by: Arturo Borrero Gonzalez aborrero@wikimedia.org