epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

Adding in certificate serial numbers to manifests (#1392)

Browse Source
This commit is contained in:
Brad Beam
2017-09-01 01:02:23 -05:00
committed by Matthew Mosesohn
parent 783924e671
commit 8ae77e955e
8 changed files with 56 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
roles/etcd/tasks/main.yml
View File

@@ -13,6 +13,11 @@
- include: upd_ca_trust.yml
tags: etcd-secrets
- name: "Gen_certs | Get etcd certificate serials"
shell: "openssl x509 -in {{ etcd_cert_dir }}/node-{{ inventory_hostname }}.pem -noout -serial | cut -d= -f2"
register: "node-{{ inventory_hostname }}_serial"
when: inventory_hostname in groups['k8s-cluster']|union(groups['etcd'])|union(groups['calico-rr']|default([]))|unique|sort
- include: "install_{{ etcd_deployment_type }}.yml"
when: is_etcd_master
tags: upgrade