Update k8s/apps/pasarguard/daemonset.yaml
This commit is contained in:
@@ -180,25 +180,27 @@ spec:
|
|||||||
echo "Certificate already exists"
|
echo "Certificate already exists"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Wait for certificate to be ready (max 60 seconds)
|
# Wait for certificate to be ready
|
||||||
|
$TTL=600
|
||||||
echo "Waiting for certificate to be ready..."
|
echo "Waiting for certificate to be ready..."
|
||||||
for i in {1..60}; do
|
for i in {1..$TTL}; do
|
||||||
if kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" &>/dev/null; then
|
if kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" &>/dev/null; then
|
||||||
echo "Certificate secret is ready!"
|
echo "Certificate secret is ready!"
|
||||||
break
|
break
|
||||||
fi
|
fi
|
||||||
echo "Waiting for certificate... ($i/60)"
|
echo "Waiting for certificate... ($i/$TTL)"
|
||||||
sleep 1
|
sleep 1
|
||||||
done
|
done
|
||||||
|
|
||||||
if ! kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" &>/dev/null; then
|
if ! kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" &>/dev/null; then
|
||||||
echo "WARNING: Certificate secret not ready after 60 seconds"
|
echo "WARNING: Certificate secret not ready after $TTL seconds"
|
||||||
else
|
else
|
||||||
# Extract certificate and key from secret to shared volume
|
# Extract certificate and key from secret to shared volume
|
||||||
echo "Extracting certificate and key..."
|
echo "Extracting certificate and key..."
|
||||||
kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" -o jsonpath='{.data.tls\.crt}' | base64 -d > /shared/tls.crt
|
kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" -o jsonpath='{.data.tls\.crt}' | base64 -d > /shared/tls.crt
|
||||||
kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" -o jsonpath='{.data.tls\.key}' | base64 -d > /shared/tls.key
|
kubectl get secret "${CERT_NAME}-tls" -n "${NAMESPACE}" -o jsonpath='{.data.tls\.key}' | base64 -d > /shared/tls.key
|
||||||
echo "Certificate and key extracted successfully"
|
echo "Certificate and key extracted successfully."
|
||||||
|
cat /shared/tls.crt
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Create individual Service and Endpoints for this node
|
# Create individual Service and Endpoints for this node
|
||||||
|
|||||||
Reference in New Issue
Block a user