diff --git a/galaxy.yml b/galaxy.yml
index 4219617..f5c9eb0 100644
--- a/galaxy.yml
+++ b/galaxy.yml
@@ -17,7 +17,7 @@
   kubernetes.core: 2.4.0
   openstack.cloud: 1.7.0
   vexxhost.ceph: 2.1.0
-  vexxhost.kubernetes: 1.10.0
+  vexxhost.kubernetes: 1.12.1
 tags:
   - application
   - cloud
diff --git a/roles/cluster_issuer/tasks/type/self-signed/main.yml b/roles/cluster_issuer/tasks/type/self-signed/main.yml
index 8461003..dd23773 100644
--- a/roles/cluster_issuer/tasks/type/self-signed/main.yml
+++ b/roles/cluster_issuer/tasks/type/self-signed/main.yml
@@ -25,8 +25,8 @@
           isCA: true
           commonName: selfsigned-ca
           secretName: "{{ cluster_issuer_self_signed_secret_name }}"
-          duration: 87600h
-          renewBefore: 360h
+          duration: 87600h0m0s
+          renewBefore: 360h0m0s
           privateKey:
             algorithm: ECDSA
             size: 256
diff --git a/roles/octavia/tasks/main.yml b/roles/octavia/tasks/main.yml
index 811f24c..c5d6491 100644
--- a/roles/octavia/tasks/main.yml
+++ b/roles/octavia/tasks/main.yml
@@ -53,8 +53,8 @@
           isCA: true
           commonName: "{{ octavia_tls_server_common_name if item == 'octavia-server' else octavia_tls_client_common_name }}"
           secretName: "{{ item }}-ca"
-          duration: 87600h
-          renewBefore: 720h
+          duration: 87600h0m0s
+          renewBefore: 720h0m0s
           privateKey: "{{ private_key | from_yaml }}"
           issuerRef:
             name: self-signed
@@ -93,8 +93,8 @@
         secretName: octavia-client-certs
         additionalOutputFormats:
           - type: CombinedPEM
-        duration: 87600h
-        renewBefore: 720h
+        duration: 87600h0m0s
+        renewBefore: 720h0m0s
         privateKey: "{{ private_key | from_yaml }}"
         issuerRef:
           name: octavia-client