c12s-kubespray/roles/kubernetes/master/templates/k8s-certs-renew.timer.j2

[Unit]
Description=Timer to renew K8S control plane certificates

[Timer]
# First Monday of each month
OnCalendar=Mon *-*-1..7 03:{{ groups['kube-master'].index(inventory_hostname) }}0:00

[Install]
WantedBy=multi-user.target
Auto renew control plane certificates (#7358) While at it remove force_certificate_regeneration This boolean only forced the renewal of the apiserver certs Either manually use k8s-certs-renew.sh or set auto_renew_certificates Signed-off-by: Etienne Champetier <e.champetier@ateme.com> (cherry picked from commit efa180392b8e7cca75cac8e11534b55f99cb9ee4) Conflicts: roles/kubernetes/master/templates/k8s-certs-renew.service.j2 roles/kubernetes/master/templates/k8s-certs-renew.sh.j2 roles/kubernetes/master/templates/k8s-certs-renew.timer.j2 2021-03-22 18:22:48 +00:00			`[Unit]`
			`Description=Timer to renew K8S control plane certificates`

			`[Timer]`
			`# First Monday of each month`
			`OnCalendar=Mon --1..7 03:{{ groups['kube-master'].index(inventory_hostname) }}0:00`

			`[Install]`
			`WantedBy=multi-user.target`