4 commits

Author	SHA1	Message	Date
MarkusTeufelberger	e67f848abc	ansible-lint: add spaces around variables [E206] (#4699)	2019-05-02 14:24:21 -07:00
Manuel Cintron	07b2894080	Adding ability to maintain existing Encryption Secrets at Rest. (#4255) ... * Adding ability to maintain existing Encryption Secrets at Rest. If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token. This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets. * Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.	2019-02-19 07:31:45 -08:00
Andreas Krüger	d5ce5874e8	Streamline path to certs dir (#3836) ... * Streamline path to certs dir * More fixes * Set path to etcd certs in kubernetes defaults instead	2018-12-06 23:11:53 -08:00
Andreas Krüger	3d6fd49179	Added option for encrypting secrets to etcd v.2 (#2428) ... * Added option for encrypting secrets to etcd * Fix keylength to 32 * Forgot the default * Rename secrets.yaml to secrets_encryption.yaml * Fix static path for secrets file to use ansible variable * Rename secrets.yaml.j2 to secrets_encryption.yaml.j2 * Base64 encode the token * Fixed merge error * Changed path to credentials dir * Update path to secrets file which is now readable inside the apiserver container. Set better file permissions * Add encryption option to k8s-cluster.yml	2018-03-15 22:20:05 +03:00