[Unit]
Description=Renew K8S control plane certificates

[Service]
Type=oneshot
ExecStart={{ bin_dir }}/k8s-certs-renew.sh