fix(provider/init): check local cert expiration (#246)

charts/akash-provider/Chart.yaml

@@ -17,7 +17,7 @@ type: application
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
 # Major version bit highlights the mainnet release (e.g. mainnet4 = 4.x.x, mainnet5 = 5.x.x, ...)
-version: 8.0.1
+version: 8.0.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/akash-provider/scripts/init.sh

@@ -121,6 +121,15 @@ if [[ $rc -ne 0 ]]; then
   GEN_NEW_CERT=0
 fi
 
+# check if current local cert has expired
+# TODO: should probably add a healthCheck which would keep doing this every 5 minutes to bounce the pod if cert got expired
+openssl x509 -checkend 604800 -noout -in "${CERT_REAL_PATH}" 2>/dev/null 1>&2
+rc=$?
+if [[ $rc -ne 0 ]]; then
+  echo "Certificate expires in less than 7 days, so going to generate a new one."
+  GEN_NEW_CERT=0
+fi
+
 if [[ "$GEN_NEW_CERT" -eq "0" ]]; then
   echo "Removing the old certificate before generating a new one"
   # It's also a good idea to delete it as otherwise, we'd have to add `--overwrite` to `provider-services tx cert generate server` command later.