This script checks the cert expiration date and rotates them if they
expires within 90 days. After cert renewed, all the k8s master
component configurations will be updated.
An alarm will be sent to fm to notify the administrator to
reboot the controllers or renew the certs manually if the automatic
process fails.
Reviewed: https:/ /review. opendev. org/705382 /git.openstack. org/cgit/ starlingx/ config/ commit/ ?id=31ce7c575f1 82e96db9f513843 253ab3737ec2d1
Committed: https:/
Submitter: Zuul
Branch: r/stx.2.0
commit 31ce7c575f182e9 6db9f513843253a b3737ec2d1
Author: Mingyuan Qi <email address hidden>
Date: Thu Dec 12 05:57:59 2019 +0000
Add k8s cert rotation script to sysinv pkg
This commit is derived from https:/ /review. opendev. org/#/c/ 692276
This script checks the cert expiration date and rotates them if they
expires within 90 days. After cert renewed, all the k8s master
component configurations will be updated.
An alarm will be sent to fm to notify the administrator to
reboot the controllers or renew the certs manually if the automatic
process fails.
Change-Id: I286c38758ded2f 661498367c7adf4 dd59e603b83 5bcb2fce31ffa31 b92b0e6f17)
Partial-Bug: 1838659
Signed-off-by: Mingyuan Qi <email address hidden>
(cherry picked from commit 7b64d87a26fac2a