efa180392b
While at it remove force_certificate_regeneration This boolean only forced the renewal of the apiserver certs Either manually use k8s-certs-renew.sh or set auto_renew_certificates Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
9 lines
226 B
Django/Jinja
9 lines
226 B
Django/Jinja
[Unit]
|
|
Description=Timer to renew K8S control plane certificates
|
|
|
|
[Timer]
|
|
# First Monday of each month
|
|
OnCalendar=Mon *-*-1..7 03:{{ groups['kube-master'].index(inventory_hostname) }}0:00
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|