135 Commits (99c139dd5abde26b621c938cd6869cdc86a2a015)

Author SHA1 Message Date
Erwan Miran b4e2b85745 Replace shell with command in order to allow the task to fail when openssl x509 does return zero (#3516) 6 years ago
Erwan Miran fcd8d850dc Fix ansible syntax to avoid ansible warnings (again) (#3509) 6 years ago
Erwan Miran 2ab2f3a0a3 Ability to define SSL certificates duration and SSL key size (#3482) 6 years ago
刘旭 145e5c8943 use copy and slurp module (#3313) 6 years ago
rongzhang 84c4c7dc82 Use synchronize module 6 years ago
Matthew Mosesohn aaa9a4efac Ensure vault file permissions are correct 6 years ago
Pablo Estigarribia 7cbe3c2171 ensure there is pin priority for docker package to avoid upgrade of docker to incompatible version 6 years ago
Erwan Miran 82a28d6bb3 Add documentation about having HA for etcd 6 years ago
Takashi Okamoto 359009bb05 Download etcd and hyperkube binary. 6 years ago
Aivars Sterns 1567a977c3
Revert "gen_certs_script: refactor using stdin (Ansible 2.4+)" 6 years ago
Tatsuyuki Ishi 69786b2d16 gen_certs_script: refactor using stdin (Ansible 2.4+) 6 years ago
Matthew Mosesohn 97e0de7e29
Fix vault file owner issues and k8s apiserver cert creation (#2985) 6 years ago
Matthew Mosesohn 5c617c5a8b
Add tags to deploy components by --tags option (#2960) 6 years ago
elementyang 7c22def422 add etcd_events_access_address 6 years ago
elementyang 70fbc01cc1 fix etcd_events_access_addresses 6 years ago
Matthew Mosesohn 59be578842
Revert "wip pr for improved cert sync" (#2849) 6 years ago
Matthew Mosesohn 7433348aae wip pr for improved cert sync 6 years ago
Markos Chandras 9168c71359 Revert "Revert "Add openSUSE support" (#2697)" (#2699) 6 years ago
Matthew Mosesohn 51f4e6585a
Revert "Add openSUSE support" (#2697) 6 years ago
Markos Chandras 2d34781259 roles: etcd: Add support for SUSE distributions 6 years ago
woopstar 86e3506ae6 Etcd cluster setup makeover 6 years ago
Andreas Krüger b9b028a735 Update etcd deployment to use correct cert and key (#2572) 6 years ago
woopstar 859a7f32fb Fix import task. Has to be include task to evalutate etcd_cluster_setup variable at run time 6 years ago
RongZhang 67ffd8e923 Add etcd-events cluster for kube-apiserver (#2385) 6 years ago
RongZhang c0aad0a6d5 Fix install etcd by host service (#2297) 6 years ago
Matthew Mosesohn dc6a17e092
Use include/import tasks (#2192) 6 years ago
Matthew Mosesohn 1401286910
Add support for cert alt names for etcd (#2139) 7 years ago
Steve Mitchell e45b30d033 Add etcd key and cert environment variables for use with client auth 7 years ago
chenhonggc c7910b51a1 --peers DEPRECATED - --endpoints should be used instead (#1943) 7 years ago
Spencer Smith 0126168472 provide environment for rkt trust and run with etcd 7 years ago
Matthew Mosesohn 86fb669fd3 Idempotency fixes (#1838) 7 years ago
Matthew Mosesohn 0b4fcc83bd Fix up warnings and deprecations (#1848) 7 years ago
Matthew Mosesohn 514359e556 Improve etcd scale up (#1846) 7 years ago
Matthew Mosesohn 10dd049912 Revert "Security fixes for etcd (#1778)" (#1786) 7 years ago
Matthew Mosesohn 4209f1cbfd Security fixes for etcd (#1778) 7 years ago
Matthew Mosesohn 83be0735cd Fix setting etcd client cert serial (#1775) 7 years ago
Aivars Sterns 9c86da1403 Normalize tags in all places to prepare for tag fixing in future (#1739) 7 years ago
Matthew Mosesohn a56738324a Move set_facts to kubespray-defaults defaults 7 years ago
Matthew Mosesohn 126f42de06 drop unused etcd logic 7 years ago
foxyriver 30b5493fd6 use command module instead of shell module 7 years ago
Brad Beam ac281476c8 Prune unnecessary certs from vault setup (#1652) 7 years ago
Matthew Mosesohn 6744726089 kubeadm support (#1631) 7 years ago
Matthew Mosesohn 5d99fa0940 Purge old upgrade hooks and unused tasks (#1641) 7 years ago
mkrasilnikov bf0af1cd3d Vault role updates: 7 years ago
Brad Beam 8ae77e955e Adding in certificate serial numbers to manifests (#1392) 7 years ago
Maxim Krasilnikov 6eb22c5db2 Change single Vault pki mount to multi pki mounts paths for etcd and kube CA`s (#1552) 7 years ago
Brad Beam 8b151d12b9 Adding yamllinter to ci steps (#1556) 7 years ago
Maxim Krasilnikov 2ba285a544 Fixed deploy cluster with vault cert manager (#1548) 7 years ago
Matthew Mosesohn 2645e88b0c Fix vault setup partially (#1531) 7 years ago
Brad Beam d09222c900 Removing run_once in these tasks so that etcd ca certs get propogated properly to worker nodes 7 years ago