shell脚本自动更新ca证书

#!/bin/bash#运行环境，1、ubuntu18.0以上，2、已经安装snap；3、已安装kubectlcertbot=`certbot --help`if test $? -eq 0thenecho "已安装certbot，为获取Let'sencrypt证书"elseecho "未安装certbot，开始安装certbot"sudo snap install --classic certbotif test $? -ne 0thenecho "安装certbot失败"exit 1elsesudo ln -s /snap/bin/certbot /usr/bin/certbotfi fiecho "DNS插件：certbot-dns-cloudflare"snap set certbot trust-plugin-with-root=oksnap install certbot-dns-cloudflareapi_token="fQfZchmS3E_Ldx5Yox1LSIa9Ur-pEP3g7B5YLeJ-"cat > ./cloudflare.ini << EOFdns_cloudflare_api_token=${api_token}EOFif test -e /etc/letsencrypt/live//fullchain.pemthenecho "更新证书"certbot renewelseecho "安装证书"certbot certonly \--dns-cloudflare \--dns-cloudflare-credentials ./cloudflare.ini \-d fiecho "保存证书到k8s保密字典"kubectl delete secret test-tls-secretkubectl create secret tls test-tls-secret \--cert=/etc/letsencrypt/live//fullchain.pem \--key=/etc/letsencrypt/live//privkey.pemif test $? -eq 0then echo "证书更新成功"exit 0else echo "证书更新失败"exit 1fi