External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-05-08 09:57:38 -02:30
Code Issues Packages Projects Releases Wiki Activity

Fix: kube-apiserver tag will overwrite secrets-at-rest token if used independently (#10460)

Browse Source 
Signed-off-by: Jason Witkowski <jwitko1@gmail.com>
This commit is contained in:
Jason Witkowski
2023-09-21 09:55:29 -04:00
committed by GitHub
parent f964b3438d
commit 7b2586943b
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/kubernetes/control-plane/tasks/encrypt-at-rest.yml
View File

@@ -38,5 +38,3 @@
owner: root owner: root
group: "{{ kube_cert_group }}" group: "{{ kube_cert_group }}"
mode: 0640 mode: 0640
tags:
- kube-apiserver

2
roles/kubernetes/control-plane/tasks/main.yml
View File

@@ -28,6 +28,8 @@
import_tasks: encrypt-at-rest.yml import_tasks: encrypt-at-rest.yml
when: when:
- kube_encrypt_secret_data - kube_encrypt_secret_data
tags:
- kube-apiserver
- name: Install | Copy kubectl binary from download dir - name: Install | Copy kubectl binary from download dir
copy: copy: