Skip to content
Blame Permalink
  • Lukas Jelinek's avatar
    debfaaa4
    sentinel-proxy: Spread cert checks/renewals across 12-hour period · debfaaa4
    Lukas Jelinek authored and Michal Hrusecky's avatar Michal Hrusecky committed 
    The current configuration checks Sentinel certificates (and renews them
eventually) twice a day at exact times. It leads to sharp load peeks on
the ca server and other parts of the Sentinel cert infrastructure. This
patch utilizes RANDOM_DELAY in the cron configuration to spread the load
across the whole 12-hour period. This delay (0 - 719 minutes) is
determined when the cron daemon starts and is kept during its operation
(thus it can be predicted when the check occurs).
    debfaaa4
    sentinel-proxy: Spread cert checks/renewals across 12-hour period
    Lukas Jelinek authored and Michal Hrusecky's avatar Michal Hrusecky committed 
    The current configuration checks Sentinel certificates (and renews them
eventually) twice a day at exact times. It leads to sharp load peeks on
the ca server and other parts of the Sentinel cert infrastructure. This
patch utilizes RANDOM_DELAY in the cron configuration to spread the load
across the whole 12-hour period. This delay (0 - 719 minutes) is
determined when the cron daemon starts and is kept during its operation
(thus it can be predicted when the check occurs).