Project

General

Profile

Bugless #40

k0: refresh certificates September 2021

Added by q3k about 3 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
q3k
Category:
-

Description

Previous refresh: #36 

cluster/certs/ca-kube-prodvider.cert            Not After : Sep  1 21:30:00 2021 GMT
cluster/certs/etcd-dcr01s22.hswaw.net.cert            Not After : Oct  3 15:33:00 2021 GMT
cluster/certs/etcd-dcr01s24.hswaw.net.cert            Not After : Oct  3 15:38:00 2021 GMT
cluster/certs/etcdpeer-dcr01s22.hswaw.net.cert            Not After : Oct  3 15:33:00 2021 GMT
cluster/certs/etcdpeer-dcr01s24.hswaw.net.cert            Not After : Oct  3 15:38:00 2021 GMT
cluster/certs/kube-apiserver.cert            Not After : Oct  3 15:26:00 2021 GMT
cluster/certs/kube-kubelet-dcr01s22.hswaw.net.cert            Not After : Oct  3 15:33:00 2021 GMT
cluster/certs/kube-kubelet-dcr01s24.hswaw.net.cert            Not After : Oct  3 15:38:00 2021 GMT
#1

Updated by q3k about 3 years ago

patryk: interested in taking a stab at this in September?

#2

Updated by q3k over 2 years ago

It's time.

hscloud-build-chrootenv:q3k@mimeomia:~/hscloud$ for f in cluster/certs/*; do exp=$(openssl x509 -text < $f  | grep "Not After"); echo $exp | grep 2021 && echo $f; done
Not After : Sep 1 21:30:00 2021 GMT
cluster/certs/ca-kube-prodvider.cert
Not After : Oct 3 15:33:00 2021 GMT
cluster/certs/etcd-dcr01s22.hswaw.net.cert
Not After : Oct 3 15:38:00 2021 GMT
cluster/certs/etcd-dcr01s24.hswaw.net.cert
Not After : Oct 3 15:33:00 2021 GMT
cluster/certs/etcdpeer-dcr01s22.hswaw.net.cert
Not After : Oct 3 15:38:00 2021 GMT
cluster/certs/etcdpeer-dcr01s24.hswaw.net.cert
Not After : Oct 3 15:26:00 2021 GMT
cluster/certs/kube-apiserver.cert
Not After : Oct 3 15:33:00 2021 GMT
cluster/certs/kube-kubelet-dcr01s22.hswaw.net.cert
Not After : Oct 3 15:38:00 2021 GMT
cluster/certs/kube-kubelet-dcr01s24.hswaw.net.cert

Let's refresh all of these bad boys.

#3

Updated by q3k over 2 years ago

Prodvider done: https://gerrit.hackerspace.pl/c/hscloud/+/1050

I'm thinking of doing the rest after unfucking nixos and thus also unfucking ceph.

#4

Updated by q3k over 2 years ago

  • Status changed from Assigned to Resolved

Also available in: Atom PDF