mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-10-29 22:03:22 -02:30
Dasmat Hansda
a9c2b73d31
* fix(etcd): ensure consistent certificate permissions on first etcd node The etcd certificate generation script runs on the first etcd node and creates certs with default ownership and permissions. Subsequent copy tasks set explicit ownership and permissions on the remaining etcd nodes, resulting in inconsistent permissions across the cluster. This can cause issues such as etcd backup jobs failing on the first node due to missing read access to certificate files. Add an ansible.builtin.file task after cert generation to explicitly set the correct ownership and permissions on the first etcd node. * fix(etcd): guard client certificate permissions * fix(etcd): set certificate permissions during installation