Lets Encrypt will only give you a cert that is good for 3 months, because they want you to automate the update.

I don't think K8S should create an LTS, I think they should make it dirt simple to update.