kubespray

4354 Commits

29 Branches

80 Tags

156 MiB

Tree: 4d57ed314d

Commit Graph

Author	SHA1	Message	Date
Manuel Cintron	07b2894080	Adding ability to maintain existing Encryption Secrets at Rest. (#4255 ) * Adding ability to maintain existing Encryption Secrets at Rest. If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token. This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets. * Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.	5 years ago
Andreas Krüger	d5ce5874e8	Streamline path to certs dir (#3836 ) * Streamline path to certs dir * More fixes * Set path to etcd certs in kubernetes defaults instead	5 years ago
Andreas Krüger	3d6fd49179	Added option for encrypting secrets to etcd v.2 (#2428 ) * Added option for encrypting secrets to etcd * Fix keylength to 32 * Forgot the default * Rename secrets.yaml to secrets_encryption.yaml * Fix static path for secrets file to use ansible variable * Rename secrets.yaml.j2 to secrets_encryption.yaml.j2 * Base64 encode the token * Fixed merge error * Changed path to credentials dir * Update path to secrets file which is now readable inside the apiserver container. Set better file permissions * Add encryption option to k8s-cluster.yml	6 years ago

Author

SHA1

Message

Date

Manuel Cintron

07b2894080

Adding ability to maintain existing Encryption Secrets at Rest. (#4255 )

* Adding ability to maintain existing Encryption Secrets at Rest.

If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.

This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.

* Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.

5 years ago

Andreas Krüger

d5ce5874e8

Streamline path to certs dir (#3836 )

* Streamline path to certs dir

* More fixes

* Set path to etcd certs in kubernetes defaults instead

5 years ago

Andreas Krüger

3d6fd49179

Added option for encrypting secrets to etcd v.2 (#2428 )

* Added option for encrypting secrets to etcd

* Fix keylength to 32

* Forgot the default

* Rename secrets.yaml to secrets_encryption.yaml

* Fix static path for secrets file to use ansible variable

* Rename secrets.yaml.j2 to secrets_encryption.yaml.j2

* Base64 encode the token

* Fixed merge error

* Changed path to credentials dir

* Update path to secrets file which is now readable inside the apiserver container. Set better file permissions

* Add encryption option to k8s-cluster.yml

6 years ago

3 Commits (4d57ed314d9db8ec7c0b834494dceccf6ceb7c5e)