X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e52080d58838ddb5b1c157113e8a4876db7ba924..08a4a99b365ee60e22ecce578b3f8197d13b201d:/tools/salt-install/common.sh diff --git a/tools/salt-install/common.sh b/tools/salt-install/common.sh index 7036e116c9..5392da71be 100644 --- a/tools/salt-install/common.sh +++ b/tools/salt-install/common.sh @@ -18,6 +18,7 @@ fi USE_SSH_JUMPHOST=${USE_SSH_JUMPHOST:-} DISABLED_CONTROLLER="" +DATABASE_POSTGRESQL_DEFAULT_VERSION=15 # Comma-separated list of nodes. This is used to dynamically adjust # salt pillars. @@ -47,9 +48,22 @@ for node in "${!NODES[@]}"; do done done +# Sets TLS certificate expiration thresholds +TLS_EXPIRATION_YELLOW=5184000 # > 2 months +TLS_EXPIRATION_GREEN=15552000 # > 6 months +if [[ "${SSL_MODE}" == "lets-encrypt" ]]; then + TLS_EXPIRATION_YELLOW=1900800 # > 22 days + TLS_EXPIRATION_GREEN=2505600 # > 29 days +fi + # Auto-detects load-balancing mode if [ -z "${ROLE2NODES['balancer']:-}" ]; then ENABLE_BALANCER="no" else ENABLE_BALANCER="yes" fi + +# Auto-sets PG version if needed +if [[ -n "${ROLE2NODES['database']:-}" || "${NODELIST}" == "localhost" ]]; then + DATABASE_POSTGRESQL_VERSION="${DATABASE_POSTGRESQL_VERSION:-${DATABASE_POSTGRESQL_DEFAULT_VERSION}}" +fi \ No newline at end of file