mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-02-28 09:39:12 +03:00
Auto renew control plane certificates (#7358)
While at it remove force_certificate_regeneration This boolean only forced the renewal of the apiserver certs Either manually use k8s-certs-renew.sh or set auto_renew_certificates Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
This commit is contained in:
committed by
GitHub
parent
6d9ed398e3
commit
efa180392b
@@ -21,6 +21,8 @@
|
||||
- containerd.service.d/http-proxy.conf
|
||||
- crio.service.d/http-proxy.conf
|
||||
- vault.service.d/http-proxy.conf
|
||||
- k8s-certs-renew.service
|
||||
- k8s-certs-renew.timer
|
||||
register: services_removed
|
||||
tags:
|
||||
- services
|
||||
@@ -292,6 +294,7 @@
|
||||
- "{{ bin_dir }}/weave"
|
||||
- "{{ bin_dir }}/crictl"
|
||||
- "{{ bin_dir }}/netctl"
|
||||
- "{{ bin_dir }}/k8s-certs-renew.sh"
|
||||
- /var/lib/cni
|
||||
- /etc/openvswitch
|
||||
- /run/openvswitch
|
||||
|
||||
Reference in New Issue
Block a user