Optionally refresh kubeadm token every time (#5043)

Change-Id: I278cb14aa93abf20160cc001f69e2f472504e6d8
5 years ago · 7cf8ad4dc7
2 changed files with 4 additions and 0 deletions
--- a/roles/kubernetes/master/defaults/main/main.yml
+++ b/roles/kubernetes/master/defaults/main/main.yml
@ -41,6 +41,9 @@ kube_scheduler_bind_address: 0.0.0.0
 # discovery_timeout modifies the discovery timeout
 discovery_timeout: 5m0s

+# Instruct first master to refresh kubeadm token
+kubeadm_refresh_token: true
+
 # audit support
 kubernetes_audit: false
 # path to audit log file
--- a/roles/kubernetes/master/tasks/kubeadm-setup.yml
+++ b/roles/kubernetes/master/tasks/kubeadm-setup.yml
@ -146,6 +146,7 @@
  when:
    - inventory_hostname == groups['kube-master']|first
    - kubeadm_token is defined
+    - kubeadm_refresh_token
  tags:
    - kubeadm_token