This script checks the cert expiration date and rotates them if they
expires within 90 days. After cert renewed, all the k8s master
component configurations will be updated.
An alarm will be sent to fm to notify the administrator to
reboot the controllers or renew the certs manually if the automatic
process fails.
Reviewed: https:/ /review. opendev. org/705384 /git.openstack. org/cgit/ starlingx/ config/ commit/ ?id=7b94ee47164 8367cdd8f289f24 08b580f563c13a
Committed: https:/
Submitter: Zuul
Branch: r/stx.3.0
commit 7b94ee471648367 cdd8f289f2408b5 80f563c13a
Author: Mingyuan Qi <email address hidden>
Date: Thu Dec 12 05:57:59 2019 +0000
Add k8s cert rotation script to sysinv pkg
This commit is derived from https:/ /review. opendev. org/#/c/ 692276
This script checks the cert expiration date and rotates them if they
expires within 90 days. After cert renewed, all the k8s master
component configurations will be updated.
An alarm will be sent to fm to notify the administrator to
reboot the controllers or renew the certs manually if the automatic
process fails.
Change-Id: I286c38758ded2f 661498367c7adf4 dd59e603b83 5bcb2fce31ffa31 b92b0e6f17)
Partial-Bug: 1838659
Signed-off-by: Mingyuan Qi <email address hidden>
(cherry picked from commit 7b64d87a26fac2a