diff options
author | Christian Albrecht <christian.albrecht@mayflower.de> | 2019-03-01 10:43:26 +0100 |
---|---|---|
committer | Christian Albrecht <christian.albrecht@mayflower.de> | 2019-03-03 19:43:15 +0100 |
commit | 74962bf767b67ca8b92e82fb0d6f6f96927601d0 (patch) | |
tree | e4545c03f80534390472767ca4ff02c61f8979d0 /nixos/modules/services/cluster/kubernetes/pki.nix | |
parent | 7df88bd802c939cb1118bd9c3208999796dc0795 (diff) | |
download | nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.tar nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.tar.gz nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.tar.bz2 nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.tar.lz nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.tar.xz nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.tar.zst nixpkgs-74962bf767b67ca8b92e82fb0d6f6f96927601d0.zip |
nixos/kubernetes: No need to restart services besides certmgr
within the node join script, since certmgr is taking care of restarting services.
Diffstat (limited to 'nixos/modules/services/cluster/kubernetes/pki.nix')
-rw-r--r-- | nixos/modules/services/cluster/kubernetes/pki.nix | 30 |
1 files changed, 7 insertions, 23 deletions
diff --git a/nixos/modules/services/cluster/kubernetes/pki.nix b/nixos/modules/services/cluster/kubernetes/pki.nix index 6f3f4107207..329278e375c 100644 --- a/nixos/modules/services/cluster/kubernetes/pki.nix +++ b/nixos/modules/services/cluster/kubernetes/pki.nix @@ -375,33 +375,17 @@ in exit 1 fi + do_restart=$(test -s ${certmgrAPITokenPath} && echo -n y || echo -n n) + echo $token > ${certmgrAPITokenPath} chmod 600 ${certmgrAPITokenPath} - echo "Restarting certmgr..." >&1 - systemctl restart certmgr - - echo "Waiting for certs to appear..." >&1 - - ${optionalString top.kubelet.enable '' - while [ ! -f ${cfg.certs.kubelet.cert} ]; do sleep 1; done - echo "Restarting kubelet..." >&1 - systemctl restart kubelet - ''} - - ${optionalString top.proxy.enable '' - while [ ! -f ${cfg.certs.kubeProxyClient.cert} ]; do sleep 1; done - echo "Restarting kube-proxy..." >&1 - systemctl restart kube-proxy - ''} - - ${optionalString top.flannel.enable '' - while [ ! -f ${cfg.certs.flannelClient.cert} ]; do sleep 1; done - echo "Restarting flannel..." >&1 - systemctl restart flannel - ''} + if [ y = $do_restart ]; then + echo "Restarting certmgr..." >&1 + systemctl restart certmgr + fi - echo "Node joined succesfully" + echo "Node joined succesfully" >&1 '')]; # isolate etcd on loopback at the master node |