4 ms·
At my last job I implemented the certificate generation as a scheduled job, which pushes the generated certificates to a private S3 bucket. Then, our standard
by quicksilver03 5y ago
At my last job I implemented the certificate generation as a scheduled job, which pushes the generated certificates to a private S3 bucket.
Then, our standard Ansible playbooks set up on each node a weekly systemd timer which downloads the needed certificates and restarts or reloads the services.