diff --git a/rust/crd/src/history.rs b/rust/crd/src/history.rs
index 0651ece5..1ca93081 100644
--- a/rust/crd/src/history.rs
+++ b/rust/crd/src/history.rs
@@ -410,7 +410,7 @@ pub struct HistoryConfig {
 
 impl HistoryConfig {
     // Auto TLS certificate lifetime
-    const DEFAULT_HISTORY_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(7);
+    const DEFAULT_HISTORY_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(1);
 
     fn default_config(cluster_name: &str) -> HistoryConfigFragment {
         HistoryConfigFragment {
diff --git a/rust/crd/src/roles.rs b/rust/crd/src/roles.rs
index 77c3d57b..72bab050 100644
--- a/rust/crd/src/roles.rs
+++ b/rust/crd/src/roles.rs
@@ -133,7 +133,7 @@ pub struct RoleConfig {
 
 impl RoleConfig {
     // Auto TLS certificate lifetime
-    const DEFAULT_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(7);
+    const DEFAULT_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(1);
 
     pub fn default_config() -> RoleConfigFragment {
         RoleConfigFragment {
@@ -225,7 +225,7 @@ pub struct SubmitConfig {
 
 impl SubmitConfig {
     // Auto TLS certificate lifetime
-    const DEFAULT_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(7);
+    const DEFAULT_SECRET_LIFETIME: Duration = Duration::from_days_unchecked(1);
 
     pub fn default_config() -> SubmitConfigFragment {
         SubmitConfigFragment {