diff --git a/.github/workflows/app-pipeline-renew-ssl-cert.yml b/.github/workflows/app-pipeline-renew-ssl-cert.yml index cd86b1f5..0421ffce 100644 --- a/.github/workflows/app-pipeline-renew-ssl-cert.yml +++ b/.github/workflows/app-pipeline-renew-ssl-cert.yml @@ -8,6 +8,8 @@ on: workflow_dispatch: branches: - main + schedule: + - cron: '0 0 1 */2 *' # 每两个月的第一天执行 jobs: renew-ssl-certs: diff --git a/playbook/ansible_playbook_tasks_setup_observability_platform.sh b/playbook/ansible_playbook_tasks_setup_observability_platform.sh index b83d1c90..5feb9284 100644 --- a/playbook/ansible_playbook_tasks_setup_observability_platform.sh +++ b/playbook/ansible_playbook_tasks_setup_observability_platform.sh @@ -28,6 +28,7 @@ cat > init_observability-server << EOF vars: group: master update_secret: true + vault: false auto_issuance: false namespace: monitoring db_namespace: database @@ -40,6 +41,7 @@ cat > init_observability-server << EOF vars: group: master update_secret: true + vault: false auto_issuance: false namespace: loadtester tls: diff --git a/playbook/roles/cert-manager/tasks/main.yml b/playbook/roles/cert-manager/tasks/main.yml index aeb6da13..cff9cbb4 100755 --- a/playbook/roles/cert-manager/tasks/main.yml +++ b/playbook/roles/cert-manager/tasks/main.yml @@ -2,6 +2,6 @@ script: files/certs_automated_issuance.sh {{ domain }} {{ dns_ak }} {{ dns_sk }} when: (inventory_hostname in groups[group]) and (auto_issuance == true) -- name: certs automated issuance +- name: Fetch Certificate and Private Key from Vault script: files/get_certificate.sh {{ domain }} {{ vault_url }} {{ vault_token }} when: (inventory_hostname in groups[group]) and (vault == true)