Retry creation of certs with backoff and eventually abort (`exit 1`) upon error

infobloxopen / konk

K8s in K8s

Apache License 2.0

21 stars 15 forks source link

Retry creation of certs with backoff and eventually abort (`exit 1`) upon error #126

Open abalaven opened 3 years ago

abalaven commented 3 years ago

The other possibility I see for improvement here would be to retry with backoff and eventually abort (exit 1) upon error. This way it would be eventually consistent during a kube-apiserver outage.

_Originally posted by @kd7lxl in https://github.com/infobloxopen/konk/pull/120#discussion_r525402993_

drewwells commented 3 years ago

Does the provision.sh script still need to check for secrets against k8s api? The secrets are created by cert-manager and can be mounted. The script then would open up the TLS certificates and do necessary kubeadm commands to create k8s api certificates.