setup_observability_platform.sh: vault -> false

.github/workflows/app-pipeline-renew-ssl-cert.yml

@@ -8,6 +8,8 @@ on:
   workflow_dispatch:
     branches:
       - main
+  schedule:
+    - cron: '0 0 1 */2 *'  # 每两个月的第一天执行
 
 jobs:
   renew-ssl-certs:

playbook/ansible_playbook_tasks_setup_observability_platform.sh

@@ -28,6 +28,7 @@ cat > init_observability-server << EOF
       vars:
         group: master
         update_secret: true
+        vault: false
         auto_issuance: false
         namespace: monitoring
         db_namespace: database
@@ -40,6 +41,7 @@ cat > init_observability-server << EOF
       vars:
         group: master
         update_secret: true
+        vault: false
         auto_issuance: false
         namespace: loadtester
         tls:

playbook/roles/cert-manager/tasks/main.yml

@@ -2,6 +2,6 @@
   script: files/certs_automated_issuance.sh {{ domain }} {{ dns_ak }} {{ dns_sk }}
   when: (inventory_hostname in groups[group]) and (auto_issuance == true)
 
-- name: certs automated issuance 
+- name: Fetch Certificate and Private Key from Vault 
   script: files/get_certificate.sh {{ domain }} {{ vault_url }} {{ vault_token }}
   when: (inventory_hostname in groups[group]) and (vault == true)