Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Move control plane certs renewal "spread out" into the systemd timer #10596

Merged
merged 2 commits into from
Nov 8, 2023
Merged

Move control plane certs renewal "spread out" into the systemd timer #10596

merged 2 commits into from
Nov 8, 2023

Commits on Nov 6, 2023

  1. Use RandomizedDelaySec to spread out control certificates renewal plane 

    If the number of control plane node is superior to 6, using (index * 10
minutes) will fail (03:60:00 is not a valid timestamp).

Compared to just fixing the jinja expression (to use a modulo for
example), this should avoid having two control planes certificates
update node being triggered at the same time.
    @VannTen
    VannTen committed Nov 6, 2023
    Configuration menu
    Copy the full SHA
    c691e1e View commit details
    Browse the repository at this point in the history

  2. Make k8s-certs-renew.timer Persistent 

    If the control plane happens to be offline during the scheduled
certificates renewal (node failure or anything like that), we still want
the renewal to happen.
    @VannTen
    VannTen committed Nov 6, 2023
    Configuration menu
    Copy the full SHA
    01b17ae View commit details
    Browse the repository at this point in the history