108 Commits (17f9242b583a0e976be4ea0d4182f6b52212b66f)

Author SHA1 Message Date
Matthew Mosesohn 1401286910
Add support for cert alt names for etcd (#2139) 7 years ago
Steve Mitchell e45b30d033 Add etcd key and cert environment variables for use with client auth 7 years ago
chenhonggc c7910b51a1 --peers DEPRECATED - --endpoints should be used instead (#1943) 7 years ago
Spencer Smith 0126168472 provide environment for rkt trust and run with etcd 7 years ago
Matthew Mosesohn 86fb669fd3 Idempotency fixes (#1838) 7 years ago
Matthew Mosesohn 0b4fcc83bd Fix up warnings and deprecations (#1848) 7 years ago
Matthew Mosesohn 514359e556 Improve etcd scale up (#1846) 7 years ago
Matthew Mosesohn 10dd049912 Revert "Security fixes for etcd (#1778)" (#1786) 7 years ago
Matthew Mosesohn 4209f1cbfd Security fixes for etcd (#1778) 7 years ago
Matthew Mosesohn 83be0735cd Fix setting etcd client cert serial (#1775) 7 years ago
Aivars Sterns 9c86da1403 Normalize tags in all places to prepare for tag fixing in future (#1739) 7 years ago
Matthew Mosesohn a56738324a Move set_facts to kubespray-defaults defaults 7 years ago
Matthew Mosesohn 126f42de06 drop unused etcd logic 7 years ago
foxyriver 30b5493fd6 use command module instead of shell module 7 years ago
Brad Beam ac281476c8 Prune unnecessary certs from vault setup (#1652) 7 years ago
Matthew Mosesohn 6744726089 kubeadm support (#1631) 7 years ago
Matthew Mosesohn 5d99fa0940 Purge old upgrade hooks and unused tasks (#1641) 7 years ago
mkrasilnikov bf0af1cd3d Vault role updates: 7 years ago
Brad Beam 8ae77e955e Adding in certificate serial numbers to manifests (#1392) 7 years ago
Maxim Krasilnikov 6eb22c5db2 Change single Vault pki mount to multi pki mounts paths for etcd and kube CA`s (#1552) 7 years ago
Brad Beam 8b151d12b9 Adding yamllinter to ci steps (#1556) 7 years ago
Maxim Krasilnikov 2ba285a544 Fixed deploy cluster with vault cert manager (#1548) 7 years ago
Matthew Mosesohn 2645e88b0c Fix vault setup partially (#1531) 7 years ago
Brad Beam d09222c900 Removing run_once in these tasks so that etcd ca certs get propogated properly to worker nodes 7 years ago
Anton e0960f6288 FIX: Unneded (extra) cycles in some tasks (#1393) 7 years ago
Anton Nerozya 1fedbded62 ignore_errors instead of failed_when: false 7 years ago
Brad Beam db3e8edacd Fixing up vault variables 7 years ago
Matthew Mosesohn ae7f59e249 Skip vault cert task evaluation completely when using script cert generation 7 years ago
Aleksandr Didenko 58acbe7caf Fix multiline when condition in sync_certs task 7 years ago
Sergii Golovatiuk f144fd1ed3 Refactor etcd role 7 years ago
Matthew Mosesohn a422ad0d50 More idempotency fixes 7 years ago
Matthew Mosesohn 4c6829513c Fix etcd idempotency 7 years ago
Matthew Mosesohn 02a8e78902 Remove standalone etcd specific play, cleanup host mode 7 years ago
Matthew Mosesohn d176818c44 Use find module for checking for certificates 7 years ago
Matthew Mosesohn d19e6dec7a speed up etcd preupgrade check 7 years ago
Matthew Mosesohn a21eb036ee Add no_log to cert tar tasks 7 years ago
Matthew Mosesohn 9c1701f2aa Add synthetic scale deployment mode 7 years ago
Andrew Greenwood ca9ea097df Cleanup legacy syntax, spacing, files all to yml 7 years ago
Sergii Golovatiuk e91e58aec9 Fix fact tags 7 years ago
Matthew Mosesohn 80c0e747a7 Fix references to CoreOS and Container Linux by CoreOS 7 years ago
Vladimir Rutsky 09847567ae set "check_mode: no" for read-only "shell" steps that registers result 7 years ago
Josh Conant 245e05ce61 Vault security hardening and role isolation 7 years ago
Matthew Mosesohn e5779ab786 Fix check for node-NODEID certs existence 7 years ago
Matthew Mosesohn fd30131dc2 Revert "Drop linux capabilities and rework users/groups" 7 years ago
Bogdan Dobrelya cb2e5ac776 Drop linux capabilities and rework users/groups 8 years ago
Greg Althaus 0d44599a63 Add explicit name printing in task names for deletgated task during 7 years ago
Sergii Golovatiuk 43fa72b7b7 Flush handlers before etcd restart 8 years ago
Greg Althaus 6c69da1573 This PR adds/or modifies a few tasks to allow for the playbook to 8 years ago
Aleksandr Didenko d9539e0f27 Fix etcd cert generation for calico-rr role 8 years ago
Bogdan Dobrelya 5af2c42bde Better fix for different CoreOS os family facts 8 years ago