epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

Enable external CA mode for control-plane deployment (#8620)

Browse Source
This commit is contained in:
Julien Le Fur
2022-04-12 14:47:23 +02:00
committed by GitHub
parent d7254eead6
commit 30306d6ec7
4 changed files with 30 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
roles/kubernetes/preinstall/tasks/0020-verify-settings.yml
View File

@@ -376,3 +376,11 @@
when:
- containerd_config is defined
- not ignore_assert_errors
- name: Stop if auto_renew_certificates is enabled when certificates are managed externally (kube_external_ca_mode is true)
assert:
that: not auto_renew_certificates
msg: "Variable auto_renew_certificates must be disabled when CA are managed externally: kube_external_ca_mode = true"
when:
- kube_external_ca_mode
- not ignore_assert_errors