Rewrite k8s-certs-renew script in Python (#13502)

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
This commit is contained in:
Ali Afsharzadeh
2026-10-15 14:06:25 +00:00
committed by GitHub
parent 0addac084f
commit 6b3cbe1cbb
5 changed files with 159 additions and 51 deletions
+10 -3
View File
@@ -127,9 +127,9 @@
when: kube_apiserver_use_authorization_config_file
- name: Install script to renew K8S control plane certificates
template:
src: k8s-certs-renew.sh.j2
dest: "{{ bin_dir }}/k8s-certs-renew.sh"
copy:
src: k8s-certs-renew.py
dest: "{{ bin_dir }}/k8s-certs-renew.py"
mode: "0755"
- name: Renew K8S control plane certificates monthly 1/2
@@ -153,3 +153,10 @@
state: started
daemon_reload: "{{ k8s_certs_units is changed }}"
when: auto_renew_certificates
# TODO: remove after the 2.33.0 release
- name: Remove the previous shell version of the renewal script
file:
path: "{{ bin_dir }}/k8s-certs-renew.sh"
state: absent
when: auto_renew_certificates