epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-03-09 19:58:07 +03:00
Code Issues Packages Projects Releases Wiki Activity

Ensure 0644 mode for ca.crt on nodes (#5428)

Browse Source 
Change-Id: I5e018dfaeffe314300b373aeb7ed5f59929cf4f9
This commit is contained in:
Matthew Mosesohn
2019-12-11 11:54:04 +03:00
committed by Kubernetes Prow Robot
parent 6ff5ccc938
commit 696fcaf391
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
roles/kubernetes/kubeadm/tasks/main.yml
View File

@@ -119,6 +119,13 @@
tags: tags:
- kube-proxy - kube-proxy
- name: Set ca.crt file permission
file:
path: "{{ kube_cert_dir }}/ca.crt"
owner: root
group: root
mode: "0644"
- name: Restart all kube-proxy pods to ensure that they load the new configmap - name: Restart all kube-proxy pods to ensure that they load the new configmap
shell: "{{ bin_dir }}/kubectl --kubeconfig {{ kube_config_dir }}/admin.conf delete pod -n kube-system -l k8s-app=kube-proxy --force --grace-period=0" shell: "{{ bin_dir }}/kubectl --kubeconfig {{ kube_config_dir }}/admin.conf delete pod -n kube-system -l k8s-app=kube-proxy --force --grace-period=0"
run_once: true run_once: true