Dasmat Hansda a9c2b73d31 fix: ensure consistent etcd certificate permissions on first etcd node (#13367) ...

* fix(etcd): ensure consistent certificate permissions on first etcd node

The etcd certificate generation script runs on the first etcd node and
creates certs with default ownership and permissions. Subsequent copy
tasks set explicit ownership and permissions on the remaining etcd
nodes, resulting in inconsistent permissions across the cluster.

This can cause issues such as etcd backup jobs failing on the first
node due to missing read access to certificate files.

Add an ansible.builtin.file task after cert generation to explicitly
set the correct ownership and permissions on the first etcd node.

* fix(etcd): guard client certificate permissions

* fix(etcd): set certificate permissions during installation

2026-09-28 07:32:33 +00:00

..

handlers

Replace injected Ansible fact variables in etcd role (#13338)

2026-09-10 11:24:34 +00:00

meta

Remove obsolete "Flatcar Container Linux by Kinvolk" fact checks (#13528)

2026-09-18 10:12:42 +00:00

tasks

Upgrade etcd to 3.7 for Kubernetes 1.37 (#13363)

2026-09-25 06:16:30 +00:00

templates

fix: ensure consistent etcd certificate permissions on first etcd node (#13367)

2026-09-28 07:32:33 +00:00