Browse Source
Merge pull request #2585 from georgejdli/fix-sa-token-signing
check if dedicated service account token signing key exists
pull/2502/merge
Chad Swenson
6 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with
3 additions and
1 deletions
-
roles/kubernetes/secrets/tasks/check-certs.yml
|
|
|
@ -50,6 +50,7 @@ |
|
|
|
'{{ kube_cert_dir }}/kube-controller-manager-key.pem', |
|
|
|
'{{ kube_cert_dir }}/front-proxy-client.pem', |
|
|
|
'{{ kube_cert_dir }}/front-proxy-client-key.pem', |
|
|
|
'{{ kube_cert_dir }}/service-account-key.pem', |
|
|
|
{% for host in groups['kube-master'] %} |
|
|
|
'{{ kube_cert_dir }}/admin-{{ host }}.pem' |
|
|
|
'{{ kube_cert_dir }}/admin-{{ host }}-key.pem' |
|
|
|
@ -71,7 +72,8 @@ |
|
|
|
{% for cert in ['apiserver.pem', 'apiserver-key.pem', |
|
|
|
'kube-scheduler.pem','kube-scheduler-key.pem', |
|
|
|
'kube-controller-manager.pem','kube-controller-manager-key.pem', |
|
|
|
'front-proxy-client.pem','front-proxy-client-key.pem'] -%} |
|
|
|
'front-proxy-client.pem','front-proxy-client-key.pem', |
|
|
|
'service-account-key.pem'] -%} |
|
|
|
{% set cert_file = "%s/%s.pem"|format(kube_cert_dir, cert) %} |
|
|
|
{% if not cert_file in existing_certs -%} |
|
|
|
{%- set gen = True -%} |
|
|
|
|
