C12s/c12s-kubespray
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Ensure 0644 mode for ca.crt on nodes (#5428)

Browse source 
Change-Id: I5e018dfaeffe314300b373aeb7ed5f59929cf4f9
This commit is contained in:
Matthew Mosesohn 2019-12-11 11:54:04 +03:00 committed by Kubernetes Prow Robot
parent 6ff5ccc938
commit 696fcaf391
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
roles/kubernetes/kubeadm/tasks/main.yml
View file

@ -119,6 +119,13 @@
tags: tags:
- kube-proxy - kube-proxy
- name: Set ca.crt file permission
file:
path: "{{ kube_cert_dir }}/ca.crt"
owner: root
group: root
mode: "0644"
- name: Restart all kube-proxy pods to ensure that they load the new configmap - name: Restart all kube-proxy pods to ensure that they load the new configmap
shell: "{{ bin_dir }}/kubectl --kubeconfig {{ kube_config_dir }}/admin.conf delete pod -n kube-system -l k8s-app=kube-proxy --force --grace-period=0" shell: "{{ bin_dir }}/kubectl --kubeconfig {{ kube_config_dir }}/admin.conf delete pod -n kube-system -l k8s-app=kube-proxy --force --grace-period=0"
run_once: true run_once: true