summaryrefslogtreecommitdiffstats
path: root/filter_plugins
diff options
context:
space:
mode:
authorAndrew Butcher <abutcher@redhat.com>2017-01-16 11:41:56 -0500
committerAndrew Butcher <abutcher@redhat.com>2017-01-16 16:16:01 -0500
commitb30c15b83937e45b7b3356ef4cb6e93c9203ff68 (patch)
treec1bd2399f23de71ae18498cb966804b24f95c68c /filter_plugins
parentb01d19b5a37330c4b3fea5f1f54efd6ef0e207c0 (diff)
downloadopenshift-b30c15b83937e45b7b3356ef4cb6e93c9203ff68.tar.gz
openshift-b30c15b83937e45b7b3356ef4cb6e93c9203ff68.tar.bz2
openshift-b30c15b83937e45b7b3356ef4cb6e93c9203ff68.tar.xz
openshift-b30c15b83937e45b7b3356ef4cb6e93c9203ff68.zip
Create individual serving cert and loopback kubeconfig for additional masters.
Deprecates use of 'create-master-certs' for generating master serving certificate and loopback kubeconfig in order to reference the first master's CA serial file.
Diffstat (limited to 'filter_plugins')
-rw-r--r--filter_plugins/openshift_master.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/filter_plugins/openshift_master.py b/filter_plugins/openshift_master.py
index 437f4c400..f71d9b863 100644
--- a/filter_plugins/openshift_master.py
+++ b/filter_plugins/openshift_master.py
@@ -517,7 +517,9 @@ class FilterModule(object):
''' Return certificates to synchronize based on facts. '''
if not issubclass(type(hostvars), dict):
raise errors.AnsibleFilterError("|failed expects hostvars is a dict")
- certs = ['admin.crt',
+ certs = ['ca.crt',
+ 'ca.key',
+ 'admin.crt',
'admin.key',
'admin.kubeconfig',
'master.kubelet-client.crt',