in internal/cloudsql/instance.go [341:353]
func refreshDuration(now, certExpiry time.Time) time.Duration {
d := certExpiry.Sub(now.Round(0))
if d < time.Hour {
// Something is wrong with the certificate, refresh now.
if d < refreshBuffer {
return 0
}
// Otherwise wait until 4 minutes before expiration for next
// refresh cycle.
return d - refreshBuffer
}
return d / 2
}