From 572ab650dbd2f091e6d8a7c6321b1f04f1825222 Mon Sep 17 00:00:00 2001 From: georgejdli Date: Fri, 30 Mar 2018 13:00:01 -0500 Subject: [PATCH] copy dedicated service account token signing key for kubeadm migration --- roles/kubernetes/master/tasks/kubeadm-migrate-certs.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/kubernetes/master/tasks/kubeadm-migrate-certs.yml b/roles/kubernetes/master/tasks/kubeadm-migrate-certs.yml index a9f938318..58eaaa66f 100644 --- a/roles/kubernetes/master/tasks/kubeadm-migrate-certs.yml +++ b/roles/kubernetes/master/tasks/kubeadm-migrate-certs.yml @@ -9,4 +9,6 @@ - {src: apiserver-key.pem, dest: apiserver.key} - {src: ca.pem, dest: ca.crt} - {src: ca-key.pem, dest: ca.key} + - {src: service-account-key.pem, dest: sa.pub} + - {src: service-account-key.pem, dest: sa.key} register: kubeadm_copy_old_certs