kubespray

82 Tags

152 MiB

Tree: 2a279e30b0

Author	SHA1	Message	Date
Matthew Mosesohn	07cc981971	refactor vault role (#2733 ) * Move front-proxy-client certs back to kube mount We want the same CA for all k8s certs * Refactor vault to use a third party module The module adds idempotency and reduces some of the repetitive logic in the vault role Requires ansible-modules-hashivault on ansible node and hvac on the vault hosts themselves Add upgrade test scenario Remove bootstrap-os tags from tasks * fix upgrade issues * improve unseal logic * specify ca and fix etcd check * Fix initialization check bump machine size	6 years ago
Matthew Mosesohn	dc6a17e092	Use include/import tasks (#2192 ) import_tasks will consume far less memory, so it should be used whenever it is compatible.	7 years ago
Matthew Mosesohn	45274560ec	Disable vault role properly on ansible 2.2.0 when condition does not seem to work correctly at playbook level for ansible 2.2.0.	8 years ago
Josh Conant	245e05ce61	Vault security hardening and role isolation	8 years ago
Josh Conant	f4ec2d18e5	Adding the Vault role	8 years ago