[Unit]
Description=Periodically fetch certificate from Kubernetes

[Timer]
OnCalendar=*-*-* 0:0:0
RandomizedDelaySec=8h

[Install]
WantedBy=timers.target