mirror of
https://github.com/kubernetes-sigs/kubespray.git
synced 2026-03-10 20:29:18 +03:00
Vault security hardening and role isolation
This commit is contained in:
@@ -13,6 +13,9 @@ node2
|
||||
|
||||
[etcd]
|
||||
node3
|
||||
|
||||
[vault]
|
||||
node3
|
||||
{% elif mode is defined and mode == "ha" %}
|
||||
[kube-master]
|
||||
node1
|
||||
@@ -24,6 +27,10 @@ node3
|
||||
[etcd]
|
||||
node2
|
||||
node3
|
||||
|
||||
[vault]
|
||||
node2
|
||||
node3
|
||||
{% else %}
|
||||
[kube-master]
|
||||
node1
|
||||
@@ -33,6 +40,9 @@ node2
|
||||
|
||||
[etcd]
|
||||
node1
|
||||
|
||||
[vault]
|
||||
node1
|
||||
{% endif %}
|
||||
|
||||
[k8s-cluster:children]
|
||||
|
||||
Reference in New Issue
Block a user