Browse Source
Add auto_renew_certificates_systemd_calendar (#7490)
This allow to configure when K8S certificates renewal runs
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
pull/7502/head
Etienne Champetier
3 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with
5 additions and
2 deletions
-
inventory/sample/group_vars/k8s-cluster/k8s-cluster.yml
-
roles/kubernetes/control-plane/defaults/main/main.yml
-
roles/kubernetes/control-plane/templates/k8s-certs-renew.timer.j2
|
|
|
@ -306,3 +306,5 @@ event_ttl_duration: "1h0m0s" |
|
|
|
|
|
|
|
## Automatically renew K8S control plane certificates on first Monday of each month |
|
|
|
auto_renew_certificates: false |
|
|
|
# First Monday of each month |
|
|
|
# auto_renew_certificates_systemd_calendar: "Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00" |
|
|
|
@ -191,3 +191,5 @@ event_ttl_duration: "1h0m0s" |
|
|
|
|
|
|
|
## Automatically renew K8S control plane certificates on first Monday of each month |
|
|
|
auto_renew_certificates: false |
|
|
|
# First Monday of each month |
|
|
|
auto_renew_certificates_systemd_calendar: "Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00" |
|
|
|
@ -2,8 +2,7 @@ |
|
|
|
Description=Timer to renew K8S control plane certificates |
|
|
|
|
|
|
|
[Timer] |
|
|
|
# First Monday of each month |
|
|
|
OnCalendar=Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00 |
|
|
|
OnCalendar={{ auto_renew_certificates_systemd_calendar }} |
|
|
|
|
|
|
|
[Install] |
|
|
|
WantedBy=multi-user.target |
