Browse Source
Add ETCD_EXPERIMENTAL_INITIAL_CORRUPT_CHECK flag to etcd config (#8664)
pull/8668/head
Florian Ruynat
2 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with
8 additions and
0 deletions
-
roles/etcd/defaults/main.yml
-
roles/etcd/templates/etcd.env.j2
|
|
@ -100,3 +100,7 @@ etcd_retries: 4 |
|
|
# - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 |
|
|
# - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 |
|
|
# - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305 |
|
|
# - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305 |
|
|
# - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 |
|
|
# - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 |
|
|
|
|
|
|
|
|
|
|
|
# ETCD 3.5.x issue |
|
|
|
|
|
# https://groups.google.com/a/kubernetes.io/g/dev/c/B7gJs88XtQc/m/rSgNOzV2BwAJ?utm_medium=email&utm_source=footer |
|
|
|
|
|
etcd_experimental_initial_corrupt_check: true |
|
|
@ -63,3 +63,7 @@ ETCDCTL_ENDPOINTS=https://127.0.0.1:2379 |
|
|
ETCDCTL_CACERT={{ etcd_cert_dir }}/ca.pem |
|
|
ETCDCTL_CACERT={{ etcd_cert_dir }}/ca.pem |
|
|
ETCDCTL_KEY={{ etcd_cert_dir }}/admin-{{ inventory_hostname }}-key.pem |
|
|
ETCDCTL_KEY={{ etcd_cert_dir }}/admin-{{ inventory_hostname }}-key.pem |
|
|
ETCDCTL_CERT={{ etcd_cert_dir }}/admin-{{ inventory_hostname }}.pem |
|
|
ETCDCTL_CERT={{ etcd_cert_dir }}/admin-{{ inventory_hostname }}.pem |
|
|
|
|
|
|
|
|
|
|
|
# ETCD 3.5.x issue |
|
|
|
|
|
# https://groups.google.com/a/kubernetes.io/g/dev/c/B7gJs88XtQc/m/rSgNOzV2BwAJ?utm_medium=email&utm_source=footer |
|
|
|
|
|
ETCD_EXPERIMENTAL_INITIAL_CORRUPT_CHECK={{ etcd_experimental_initial_corrupt_check }} |
