Security fixes for etcd (#1778)

* Security fixes for etcd * Use certs when querying etcd
2026-02-28 01:29:42 +03:00 · 2017-10-12 13:32:54 +01:00
parent ee83e874a8
commit 4209f1cbfd
4 changed files with 17 additions and 3 deletions
--- a/roles/etcd/handlers/main.yml
+++ b/roles/etcd/handlers/main.yml
@@ -21,6 +21,8 @@
 - name: wait for etcd up
  uri:
    url: "https://{% if is_etcd_master %}{{ etcd_address }}{% else %}127.0.0.1{% endif %}:2379/health"
+    client_cert: "{{ etcd_cert_dir}}/admin-{{ groups['etcd'][0] }}.pem"
+    client_key: "{{ etcd_cert_dir }}/admin-{{ groups['etcd'][0] }}-key.pem"
    validate_certs: no
  register: result
  until: result.status is defined and result.status == 200