From 83d4a54a80dba086b5174cea37dfb9197582eee3 Mon Sep 17 00:00:00 2001
From: Jonas Juselius <jonas.juselius@itpartner.no>
Date: Tue, 28 Jan 2020 13:29:55 +0100
Subject: [PATCH] Restart cfssl periodically

---
 lib/k8s.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/lib/k8s.nix b/lib/k8s.nix
index 4cfb331..dad3110 100644
--- a/lib/k8s.nix
+++ b/lib/k8s.nix
@@ -45,7 +45,8 @@ let
         mkdir -p $out/share/kube-system-bootstrap/charts
 
         export bash="${pkgs.bash}"
-        export apiserver="${settings.master.address}"
+        export apiserver="${settings.master.name}"
+        export apiserverAddress="${settings.master.address}"
         export initca="${initca}"
         export cluster="${clusterName}"
         export fileserver="${fileserver}"
@@ -110,6 +111,7 @@ let
         securePort = 4443;
         insecurePort = 8080;
         extraOpts = "--requestheader-client-ca-file ${cluster-ca}/ca.pem";
+        # verbosity = 4;
       };
 
       controllerManager = {
@@ -154,6 +156,12 @@ let
         Restart = "on-failure";
       };
     };
+    systemd.services.cfssl-restart  = {
+      enable = true;
+      startAt  = "00/6:00";
+      description = "Restrart cfssl which regularly locks up";
+      script = "systemctl restart cfssl.service";
+    };
   };
 
   kubeWorker = {