External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-10-29 22:03:22 -02:30
Code Issues Packages Projects Releases Wiki Activity
9,034 Commits 61 Branches 91 Tags
0addac084fdb77149175e9f326aa11024a02b797
Commit Graph
11 Commits
Author SHA1 Message Date
Ali Afsharzadeh e125a30b16 Fix k8s-certs-renew renewing on nodes without super-admin.conf (#13414) 
Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
 2026-09-03 14:30:21 +00:00
Ali AfsharzadehandChengHao Yang ae329ee192 Fix k8s-certs-renew renewing all certificates on every timer run (#13413) 
* Fix k8s-certs-renew renewing all certificates on every timer run

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Strip trailing whitespace from systemd-analyze calendar output

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>

* Remove issue link

Co-authored-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>

---------

Signed-off-by: Ali Afsharzadeh <afsharzadeh8@gmail.com>
Co-authored-by: ChengHao Yang <17496418+tico88612@users.noreply.github.com>
 2026-08-21 07:07:16 +00:00
Max Gautier df3f0a2341 k8s-certs-renew: fix broken script (#12876) 
Unproquer quoting of variable assignment make the shell interpret it as
a command ; since the variable is unused anyway, just delete it.
 2026-01-19 22:57:47 +05:30
Peter Pan 85b0be144a Fix: check expiry before do breaking renew and container restart actions (#12194) 
* Fix: check expiraty before renew

Since certificate renewal and container restarts involve higher risks,
they should be executed with extra caution.

* squash to Fix: check expiraty before renew

* squash to Fix: address more comments from VannTen

Signed-off-by: Peter Pan <Peter.Pan@daocloud.io>

---------

Signed-off-by: Peter Pan <Peter.Pan@daocloud.io>
 2025-06-05 01:04:41 -07:00
Kevin Huang 2c2e608eac fix(k8s-certs-renew): Use kube_apiserver_port instead of hard-coding (#9620) 
Signed-off-by: Kevin Huang <git@kevin.huang.to>

Signed-off-by: Kevin Huang <git@kevin.huang.to>
 2022-12-27 18:17:35 -08:00
Kenichi Omichi b49ae8c21d Delete "kubeadm alpha certs" code (#8322) 
"kubeadm alpha certs" command has been promoted to "kubeadm certs" command,
and "kubeadm alpha certs" has been deprecated since Kubernetes v1.20 as [1].
In addition, Kubespray supports Kubernetes v1.20+.
This delete the deprecated command for cleanup.

[1]: https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.20.md#deprecation
 2021-12-20 12:53:33 -08:00
Wang Zhen 2211504790 Fix k8s-certs-renew cp path (#7992) 
Signed-off-by: Wang Zhen <lazybetrayer@gmail.com>
 2021-09-21 00:36:22 -07:00
Sergey cce0940e1f add CI test for auto_renew_certificates (#7472) 
* add CI test for auto_renew_certificates

* change timer value

fix typo error in rotate cert script
 2021-04-09 00:42:47 -07:00
Helmut Januschka cce9d3125d Update k8s-certs-renew.sh.j2 (#7422) 
fix undefinedElse
 2021-03-31 00:00:58 -07:00
Etienne Champetier 2d1597bf10 Fix k8s-certs-renew for k8s < 1.20 (#7410) 
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
 2021-03-26 08:44:44 -07:00
Etienne Champetier efa180392b Auto renew control plane certificates (#7358) 
While at it remove force_certificate_regeneration
This boolean only forced the renewal of the apiserver certs
Either manually use k8s-certs-renew.sh or set auto_renew_certificates

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
 2021-03-22 11:22:48 -07:00