SRE-880 Restart etcd on certificate change

Etcd does not automatically pickup changes to CA certificates. This commits adds an automatic restart step on certificate change. See etcd-io/etcd#11555 for context. Signed-off-by: Jean-Tiare Le Bigot <[email protected]>
ResilienceCare · Feb 19, 2024 · 5cb55b2 · 5cb55b2
1 parent faedd7a
commit 5cb55b2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/handlers/main.yml b/handlers/main.yml
@@ -1,4 +1,10 @@
 ---
+- name: restart etcd
+  ansible.builtin.systemd_service:
+    daemon_reload: true
+    name: etcd
+    state: restarted
+
 - name: reload systemd
   systemd:
     daemon_reload: yes
diff --git a/tasks/main.yml b/tasks/main.yml
@@ -40,6 +40,8 @@
     group: root
   with_items:
     - "{{ etcd_certificates }}"
+  notify:
+    - restart etcd
   no_log: true
   tags:
     - etcd