External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-16 02:30:03 -03:30
Code Issues Packages Projects Releases Wiki Activity

Enable openstack_cacert to be either file or base64 string (#5243)

Browse Source
This commit is contained in:
Matthew Mosesohn
2019-10-09 12:19:49 +03:00
committed by Kubernetes Prow Robot
parent 2864e13ff9
commit dea9304968
2 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
roles/kubernetes/node/tasks/main.yml
View File

@@ -166,14 +166,24 @@
- cloud-provider
- facts
- name: Test if openstack_cacert is a base64 string
set_fact:
openstack_cacert_is_base64: "{% if openstack_cacert | b64decode %}true{% else %}false{% endif %}"
when:
- cloud_provider is defined
- cloud_provider == 'openstack'
- openstack_cacert is defined
- openstack_cacert | length > 0
- name: Write cacert file
copy:
src: "{{ openstack_cacert }}"
src: "{{ openstack_cacert if not openstack_cacert_is_base64 else omit }}"
content: "{{ openstack_cacert | b64decode if openstack_cacert_is_base64 else omit }}"
dest: "{{ kube_config_dir }}/openstack-cacert.pem"
group: "{{ kube_cert_group }}"
mode: 0640
when:
- inventory_hostname in groups['k8s-cluster']
- cloud_provider is defined
- cloud_provider == 'openstack'
- openstack_cacert is defined
@@ -197,4 +207,4 @@
- import_tasks: kubelet.yml
tags:
- kubelet
- kubeadm
- kubeadm