Security fixes for etcd (#1778)

* Security fixes for etcd * Use certs when querying etcd
2026-02-01 01:28:11 -03:30 · 2017-10-12 13:32:54 +01:00
parent ee83e874a8
commit 4209f1cbfd
4 changed files with 17 additions and 3 deletions
--- a/roles/network_plugin/calico/tasks/main.yml
+++ b/roles/network_plugin/calico/tasks/main.yml
@@ -81,6 +81,8 @@
 - name: Calico | wait for etcd
  uri:
    url: https://localhost:2379/health
+    client_cert: "{{ etcd_cert_dir}}/admin-{{ groups['etcd'][0] }}.pem"
+    client_key: "{{ etcd_cert_dir }}/admin-{{ groups['etcd'][0] }}-key.pem"
    validate_certs: no
  register: result
  until: result.status == 200 or result.status == 401