External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-05-08 01:47:37 -02:30
Code Issues Packages Projects Releases Wiki Activity

Fix vault file owner issues and k8s apiserver cert creation (#2985)

Browse Source 
apiserver cert should be created only once
This commit is contained in:
Matthew Mosesohn
2018-07-11 14:58:02 +03:00
committed by GitHub
parent 83d1486a67
commit 97e0de7e29
5 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/vault/tasks/shared/issue_cert.yml
View File

@@ -45,7 +45,7 @@
state: directory
recurse: yes
owner: "vault"
group: "vault"
group: "root"
mode: 0755
- name: gen_certs_vault | install hvac
@@ -87,6 +87,7 @@
format: "{{ issue_cert_format | d('pem') }}"
ip_sans: "{{ issue_cert_ip_sans | default([]) | join(',') }}"
register: issue_cert_result
run_once: "{{ issue_cert_run_once | d(false) }}"
- name: "issue_cert | Copy {{ issue_cert_path }} cert to all hosts"
copy: