From d4d6389899c449d66945ea40d8b5dc5fef83755c Mon Sep 17 00:00:00 2001 From: Haitao Pan Date: Thu, 4 Jan 2024 15:37:51 +0800 Subject: [PATCH] .github/workflows/use-renew-ssl-certs.yml: update --- .github/workflows/use-renew-ssl-certs.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/use-renew-ssl-certs.yml b/.github/workflows/use-renew-ssl-certs.yml index 1a7f45a2..b18c02e8 100644 --- a/.github/workflows/use-renew-ssl-certs.yml +++ b/.github/workflows/use-renew-ssl-certs.yml @@ -82,12 +82,11 @@ jobs: # Write Certificate and Private Key to Vault vault login ${VAULT_TOKEN} - vault secrets disable pki - vault secrets destroy pki - vault secrets enable pki + #vault secrets disable pki + #vault secrets destroy pki + vault secrets enable pki || true vault secrets tune -max-lease-ttl=1680h pki - vault secrets enable -path=pki pki || true - vault write pki/roles/${DOMAIN} allowed_domains=${DOMAIN} allow_subdomains=true max_ttl=720h + ault write pki/roles/${DOMAIN} allowed_domains=${DOMAIN} allow_subdomains=true max_ttl=720h vault write pki/issue/${DOMAIN} common_name=${DOMAIN} \ ttl=720h \ max_ttl=1680h \