This script checks the cert expiration date and rotates them if they
expires within 90 days. After cert renewed, all the k8s master
component configurations will be updated.
An alarm will be sent to fm to notify the administrator to
reboot the controllers or renew the certs manually if the automatic
process fails.
Reviewed: https:/ /review. opendev. org/698624 /git.openstack. org/cgit/ starlingx/ config/ commit/ ?id=7b64d87a26f ac2a5bcb2fce31f fa31b92b0e6f17
Committed: https:/
Submitter: Zuul
Branch: master
commit 7b64d87a26fac2a 5bcb2fce31ffa31 b92b0e6f17
Author: Mingyuan Qi <email address hidden>
Date: Thu Dec 12 05:57:59 2019 +0000
Add k8s cert rotation script to sysinv pkg
This commit is derived from https:/ /review. opendev. org/#/c/ 692276
This script checks the cert expiration date and rotates them if they
expires within 90 days. After cert renewed, all the k8s master
component configurations will be updated.
An alarm will be sent to fm to notify the administrator to
reboot the controllers or renew the certs manually if the automatic
process fails.
Change-Id: I286c38758ded2f 661498367c7adf4 dd59e603b83
Partial-Bug: 1838659
Signed-off-by: Mingyuan Qi <email address hidden>