Browse Source
Fixup kubelet.conf to point to kubelet-client-current.pem (#7347)
c9c0c01de0 only fix the problem for new clusters
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
pull/7358/head
Etienne Champetier
4 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with
22 additions and
0 deletions
-
roles/kubernetes/control-plane/tasks/kubelet-fix-client-cert-rotation.yml
-
roles/kubernetes/control-plane/tasks/main.yml
|
|
|
@ -0,0 +1,18 @@ |
|
|
|
--- |
|
|
|
- name: Fixup kubelet client cert rotation 1/2 |
|
|
|
lineinfile: |
|
|
|
path: "{{ kube_config_dir }}/kubelet.conf" |
|
|
|
regexp: '^ client-certificate-data: ' |
|
|
|
line: ' client-certificate: /var/lib/kubelet/pki/kubelet-client-current.pem' |
|
|
|
backup: yes |
|
|
|
notify: |
|
|
|
- "Master | reload kubelet" |
|
|
|
|
|
|
|
- name: Fixup kubelet client cert rotation 2/2 |
|
|
|
lineinfile: |
|
|
|
path: "{{ kube_config_dir }}/kubelet.conf" |
|
|
|
regexp: '^ client-key-data: ' |
|
|
|
line: ' client-key: /var/lib/kubelet/pki/kubelet-client-current.pem' |
|
|
|
backup: yes |
|
|
|
notify: |
|
|
|
- "Master | reload kubelet" |
|
|
|
@ -62,3 +62,7 @@ |
|
|
|
|
|
|
|
- name: Include kubeadm secondary server apiserver fixes |
|
|
|
include_tasks: kubeadm-fix-apiserver.yml |
|
|
|
|
|
|
|
- name: Include kubelet client cert rotation fixes |
|
|
|
include_tasks: kubelet-fix-client-cert-rotation.yml |
|
|
|
when: kubelet_rotate_certificates |
