Merge "Rotate k8s certificate automatically" into r/stx.3.0

2020-02-04 20:56:46 +00:00 · 2020-02-04 20:56:46 +00:00 · af2aa8884c
commit af2aa8884c
parent 0c13c06b02 5fdd0989ff
1 changed files with 10 additions and 0 deletions
--- a/puppet-manifests/src/modules/platform/manifests/kubernetes.pp
+++ b/puppet-manifests/src/modules/platform/manifests/kubernetes.pp
@ -347,6 +347,16 @@ class platform::kubernetes::master::init
      ensure => present,
    }
  }
+
+  # Run kube-cert-rotation daily
+  cron { 'kube-cert-rotation':
+    ensure      => 'present',
+    command     => '/usr/bin/kube-cert-rotation.sh',
+    environment => 'PATH=/bin:/usr/bin:/usr/sbin',
+    minute      => '10',
+    hour        => '*/24',
+    user        => 'root',
+  }
 }

 class platform::kubernetes::master