6eb22c5db2
* Added update CA trust step for etcd and kube/secrets roles * Added load_balancer_domain_name to certificate alt names if defined. Reset CA's in RedHat os. * Rename kube-cluster-ca.crt to vault-ca.crt, we need separated CA`s for vault, etcd and kube. * Vault role refactoring, remove optional cert vault auth because not not used and worked. Create separate CA`s fro vault and etcd. * Fixed different certificates set for vault cert_managment * Update doc/vault.md * Fixed condition create vault CA, wrong group * Fixed missing etcd_cert_path mount for rkt deployment type. Distribute vault roles for all vault hosts * Removed wrong when condition in create etcd role vault tasks.
51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
---
|
|
- include: pre_upgrade.yml
|
|
when: etcd_cluster_setup
|
|
tags: etcd-pre-upgrade
|
|
|
|
- include: check_certs.yml
|
|
when: cert_management == "script"
|
|
tags: [etcd-secrets, facts]
|
|
|
|
- include: "gen_certs_{{ cert_management }}.yml"
|
|
tags: etcd-secrets
|
|
|
|
- include: upd_ca_trust.yml
|
|
tags: etcd-secrets
|
|
|
|
- include: "install_{{ etcd_deployment_type }}.yml"
|
|
when: is_etcd_master
|
|
tags: upgrade
|
|
|
|
- include: set_cluster_health.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- include: configure.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- include: refresh_config.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- name: Restart etcd if certs changed
|
|
command: /bin/true
|
|
notify: restart etcd
|
|
when: is_etcd_master and etcd_secret_changed|default(false)
|
|
|
|
# reload-systemd
|
|
- meta: flush_handlers
|
|
|
|
- name: Ensure etcd is running
|
|
service:
|
|
name: etcd
|
|
state: started
|
|
enabled: yes
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
# After etcd cluster is assembled, make sure that
|
|
# initial state of the cluster is in `existing`
|
|
# state insted of `new`.
|
|
- include: set_cluster_health.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|
|
|
|
- include: refresh_config.yml
|
|
when: is_etcd_master and etcd_cluster_setup
|