b19d109a12
While at it remove force_certificate_regeneration
This boolean only forced the renewal of the apiserver certs
Either manually use k8s-certs-renew.sh or set auto_renew_certificates
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
(cherry picked from commit efa180392b)
Conflicts:
roles/kubernetes/master/templates/k8s-certs-renew.service.j2
roles/kubernetes/master/templates/k8s-certs-renew.sh.j2
roles/kubernetes/master/templates/k8s-certs-renew.timer.j2
9 lines
226 B
Django/Jinja
9 lines
226 B
Django/Jinja
[Unit]
|
|
Description=Timer to renew K8S control plane certificates
|
|
|
|
[Timer]
|
|
# First Monday of each month
|
|
OnCalendar=Mon *-*-1..7 03:{{ groups['kube-master'].index(inventory_hostname) }}0:00
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|