epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-25 19:18:29 +03:00
Code Issues Packages Projects Releases Wiki Activity
8,590 Commits 47 Branches 88 Tags
c2e17c9891019cab6a1ffcd74a29ec14469479bc
Commit Graph

9 Commits

Author SHA1 Message Date
k8s-infra-cherrypick-robot
0b199325c8 k8s-certs-renew: fix broken script (#12881) 
Unproquer quoting of variable assignment make the shell interpret it as
a command ; since the variable is unused anyway, just delete it.

Co-authored-by: Max Gautier <mg@max.gautier.name>
 2026-01-20 08:48:48 +05:30
Peter Pan
85b0be144a Fix: check expiry before do breaking renew and container restart actions (#12194) 
* Fix: check expiraty before renew

Since certificate renewal and container restarts involve higher risks,
they should be executed with extra caution.

* squash to Fix: check expiraty before renew

* squash to Fix: address more comments from VannTen

Signed-off-by: Peter Pan <Peter.Pan@daocloud.io>

---------

Signed-off-by: Peter Pan <Peter.Pan@daocloud.io>
 2025-06-05 01:04:41 -07:00
Kevin Huang
2c2e608eac fix(k8s-certs-renew): Use kube_apiserver_port instead of hard-coding (#9620) 
Signed-off-by: Kevin Huang <git@kevin.huang.to>

Signed-off-by: Kevin Huang <git@kevin.huang.to>
 2022-12-27 18:17:35 -08:00
Kenichi Omichi
b49ae8c21d Delete "kubeadm alpha certs" code (#8322) 
"kubeadm alpha certs" command has been promoted to "kubeadm certs" command,
and "kubeadm alpha certs" has been deprecated since Kubernetes v1.20 as [1].
In addition, Kubespray supports Kubernetes v1.20+.
This delete the deprecated command for cleanup.

[1]: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#deprecation
 2021-12-20 12:53:33 -08:00
Wang Zhen
2211504790 Fix k8s-certs-renew cp path (#7992) 
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
 2021-09-21 00:36:22 -07:00
Sergey
cce0940e1f add CI test for auto_renew_certificates (#7472) 
* add CI test for auto_renew_certificates

* change timer value

fix typo error in rotate cert script
 2021-04-09 00:42:47 -07:00
Helmut Januschka
cce9d3125d Update k8s-certs-renew.sh.j2 (#7422) 
fix undefinedElse
 2021-03-31 00:00:58 -07:00
Etienne Champetier
2d1597bf10 Fix k8s-certs-renew for k8s < 1.20 (#7410) 
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
 2021-03-26 08:44:44 -07:00
Etienne Champetier
efa180392b Auto renew control plane certificates (#7358) 
While at it remove force_certificate_regeneration
This boolean only forced the renewal of the apiserver certs
Either manually use k8s-certs-renew.sh or set auto_renew_certificates

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
 2021-03-22 11:22:48 -07:00