epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-09 11:47:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

Auto renew control plane certificates (#7358)

Browse Source 
While at it remove force_certificate_regeneration
This boolean only forced the renewal of the apiserver certs
Either manually use k8s-certs-renew.sh or set auto_renew_certificates

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
This commit is contained in:
Etienne Champetier
2021-03-22 14:22:48 -04:00
committed by GitHub
parent 6d9ed398e3
commit efa180392b
8 changed files with 73 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/kubernetes/control-plane/defaults/main/main.yml
View File

@@ -194,5 +194,6 @@ secrets_encryption_query: "resources[*].providers[0].{{kube_encryption_algorithm
## Amount of time to retain events. (default 1h0m0s)
event_ttl_duration: "1h0m0s"
## Force regeneration of kubernetes control plane certificates without the need of bumping the cluster version
force_certificate_regeneration: false
## Automatically renew K8S control plane certificates on first Monday of each month
auto_renew_certificates: false