External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-16 08:27:31 -02:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #818 from mattymo/calico-rr-certs

Browse Source 
Fix calico-rr to use etcd certs instead of kube certs
This commit is contained in:
Matthew Mosesohn
2016-12-28 08:47:16 +03:00
committed by GitHub
parent 399cb9707a 6d9cd2d720
commit e7a1949d85
5 changed files with 16 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
roles/kubernetes/secrets/tasks/gen_certs.yml
View File

@@ -51,10 +51,9 @@
- name: Gen_certs | Copy certs on nodes
shell: "echo '{{node_cert_data.stdout|quote}}' | base64 -d | tar xz -C {{ kube_cert_dir }}"
changed_when: false
when: (inventory_hostname in groups['kube-node'] or
(peer_with_calico_rr and inventory_hostname in groups['calico-rr'])) and
sync_certs|default(false) and
inventory_hostname != groups['kube-master'][0]
when: inventory_hostname in groups['kube-node'] and
sync_certs|default(false) and
inventory_hostname != groups['kube-master'][0]
- name: Gen_certs | check certificate permissions
file: