mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-07-11 21:06:19 +03:00
nixos/kubernetes: Address review: Separate preStart from certificates
This commit is contained in:
parent
52fe1d2e7a
commit
7323b77435
6 changed files with 39 additions and 34 deletions
|
@ -111,12 +111,11 @@ in
|
|||
after = [ "kube-apiserver.service" ];
|
||||
before = [ "kube-control-plane-online.target" ];
|
||||
preStart = ''
|
||||
${top.lib.mkWaitCurl (with top.pki.certs.controllerManagerClient; {
|
||||
${top.lib.mkWaitCurl ( with config.systemd.services.kube-controller-manager; {
|
||||
sleep = 1;
|
||||
path = "/api";
|
||||
cacert = top.caFile;
|
||||
inherit cert key;
|
||||
})}
|
||||
} // optionalAttrs (environment ? cert) { inherit (environment) cert key; })}
|
||||
'';
|
||||
serviceConfig = {
|
||||
RestartSec = "30s";
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue