Merge pull request #94 from utilitywarehouse/scheduler-cert-reload

Scheduler - reload certificates from disk
utilitywarehouse · Aug 2, 2019 · 5ae6206 · 5ae6206
2 parents 6452140 + 0f91b4e
commit 5ae6206
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/resources/master-kubelet.service b/resources/master-kubelet.service
@@ -22,8 +22,11 @@ ExecStartPre=/opt/bin/cfssl-new-apiserver-cert
 ExecStartPre=/opt/bin/cfssl-new-apiserver-kubelet-client-cert
 ExecStartPre=/opt/bin/cfssl-new-scheduler-cert
 ExecStartPre=/opt/bin/cfssl-new-controller-manager-cert
-ExecStartPre=-/bin/sh -c "docker restart $(docker ps --no-trunc | grep 'kube-controller-manager' | awk '{ print $1; }')"
-ExecStartPre=-/bin/sh -c "docker restart $(docker ps --no-trunc | grep 'kube-apiserver' | awk '{ print $1; }')"
+# Hack to reload certs on control plane tier
+#  https://github.com/kubernetes/kubernetes/issues/46287
+ExecStartPre=-/bin/sh -c "docker restart $(docker ps -q -f name=k8s_kube-controller-manager)"
+ExecStartPre=-/bin/sh -c "docker restart $(docker ps -q -f name=k8s_kube-apiserver)"
+ExecStartPre=-/bin/sh -c "docker restart $(docker ps -q -f name=k8s_kube-scheduler)"
 ExecStart=${kubelet_binary_path} \
   --allow-privileged \
   --config=/etc/kubernetes/config/master-kubelet-conf.yaml \