epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

Enable external CA mode for control-plane deployment (#8620)

Browse Source
This commit is contained in:
Julien Le Fur
2022-04-12 14:47:23 +02:00
committed by GitHub
parent d7254eead6
commit 30306d6ec7
4 changed files with 30 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
roles/kubespray-defaults/defaults/main.yaml
View File

@@ -157,6 +157,12 @@ kube_token_dir: "{{ kube_config_dir }}/tokens"
# cert files to. Not really changeable...
kube_cert_group: kube-cert
# Set to true when the CAs are managed externally.
# When true, disables all tasks manipulating certificates. Ensure before the kubespray run that:
# - Certificates and CAs are present in kube_cert_dir
# - Kubeconfig files are present in kube_config_dir
kube_external_ca_mode: false
# Cluster Loglevel configuration
kube_log_level: 2