richard
/
kubespray
mirror of https://github.com/kubernetes-sigs/kubespray.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
495 Commits
29 Branches
81 Tags
150 MiB
Tree: d8bebcd201
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'd8bebcd201'
${ noResults }
kubespray/roles/kubernetes/secrets/templates/openssl.conf.j2

22 lines
921 B
Raw Normal View History

Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs
9 years ago
​
​
​
​
​
​
​
​
​
​
Add kubernetes.default.svc in certs dns
8 years ago
​
manage undefined vars for loadbalancing
9 years ago
Add kubernetes.default.svc in certs dns
8 years ago
manage undefined vars for loadbalancing
9 years ago
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs
9 years ago
Add variables and defaults for multiple types of ip addresses. Each node can have 3 IPs. 1. ansible_default_ip4 - whatever ansible things is the first IPv4 address usually with the default gw. 2. ip - An address to use on the local node to bind listeners and do local communication. For example, Vagrant boxes have a first address that is the NAT bridge and is common for all nodes. The second address/interface should be used. 3. access_ip - An address to use for node-to-node access. This is assumed to be used by other nodes to access the node and may not be actually assigned on the node. For example, AWS public ip that is not assigned to node. This updates the places addresses are used to use either ip or access_ip and walk up the list to find an address.
8 years ago
​
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs
9 years ago
Add variables and defaults for multiple types of ip addresses. Each node can have 3 IPs. 1. ansible_default_ip4 - whatever ansible things is the first IPv4 address usually with the default gw. 2. ip - An address to use on the local node to bind listeners and do local communication. For example, Vagrant boxes have a first address that is the NAT bridge and is common for all nodes. The second address/interface should be used. 3. access_ip - An address to use for node-to-node access. This is assumed to be used by other nodes to access the node and may not be actually assigned on the node. For example, AWS public ip that is not assigned to node. This updates the places addresses are used to use either ip or access_ip and walk up the list to find an address.
8 years ago
Master and nodes will run the 'node' role, kube-proxy is run under a container, new script for ssl certs
9 years ago
  1. [req]
  2. req_extensions = v3_req
  3. distinguished_name = req_distinguished_name
  4. [req_distinguished_name]
  5. [ v3_req ]
  6. basicConstraints = CA:FALSE
  7. keyUsage = nonRepudiation, digitalSignature, keyEncipherment
  8. subjectAltName = @alt_names
  9. [alt_names]
  10. DNS.1 = kubernetes
  11. DNS.2 = kubernetes.default
  12. DNS.3 = kubernetes.default.svc
  13. DNS.4 = kubernetes.default.svc.{{ dns_domain }}
  14. {% if loadbalancer_apiserver is defined and apiserver_loadbalancer_domain_name is defined %}
  15. DNS.5 = {{ apiserver_loadbalancer_domain_name }}
  16. {% endif %}
  17. {% for host in groups['kube-master'] %}
  18. IP.{{ 2 * loop.index - 1 }} = {{ hostvars[host]['access_ip'] | default(hostvars[host]['ansible_default_ipv4']['address']) }}
  19. IP.{{ 2 * loop.index }} = {{ hostvars[host]['ip'] | default(hostvars[host]['ansible_default_ipv4']['address']) }}
  20. {% endfor %}
  21. {% set idx = groups['kube-master'] | length | int * 2 + 1 %}
  22. IP.{{ idx | string }} = {{ kube_apiserver_ip }}