Add auto_renew_certificates_systemd_calendar (#7490)
This allow to configure when K8S certificates renewal runs Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
This commit is contained in:
parent
42382e2cde
commit
bf6a39eb84
|
@ -306,3 +306,5 @@ event_ttl_duration: "1h0m0s"
|
||||||
|
|
||||||
## Automatically renew K8S control plane certificates on first Monday of each month
|
## Automatically renew K8S control plane certificates on first Monday of each month
|
||||||
auto_renew_certificates: false
|
auto_renew_certificates: false
|
||||||
|
# First Monday of each month
|
||||||
|
# auto_renew_certificates_systemd_calendar: "Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00"
|
||||||
|
|
|
@ -191,3 +191,5 @@ event_ttl_duration: "1h0m0s"
|
||||||
|
|
||||||
## Automatically renew K8S control plane certificates on first Monday of each month
|
## Automatically renew K8S control plane certificates on first Monday of each month
|
||||||
auto_renew_certificates: false
|
auto_renew_certificates: false
|
||||||
|
# First Monday of each month
|
||||||
|
auto_renew_certificates_systemd_calendar: "Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00"
|
||||||
|
|
|
@ -2,8 +2,7 @@
|
||||||
Description=Timer to renew K8S control plane certificates
|
Description=Timer to renew K8S control plane certificates
|
||||||
|
|
||||||
[Timer]
|
[Timer]
|
||||||
# First Monday of each month
|
OnCalendar={{ auto_renew_certificates_systemd_calendar }}
|
||||||
OnCalendar=Mon *-*-1,2,3,4,5,6,7 03:{{ groups['kube_control_plane'].index(inventory_hostname) }}0:00
|
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=multi-user.target
|
WantedBy=multi-user.target
|
||||||
|
|
Loading…
Reference in a new issue