c3f369d5b8
Generate SSL cert/key for kubelet and configure it to use those instead of generating self-signed ones. Closes #1035
18 lines
448 B
Django/Jinja
18 lines
448 B
Django/Jinja
[req]
|
|
req_extensions = v3_req
|
|
distinguished_name = req_distinguished_name
|
|
|
|
[req_distinguished_name]
|
|
|
|
[v3_req]
|
|
basicConstraints = CA:FALSE
|
|
keyUsage = digitalSignature, keyEncipherment
|
|
subjectAltName = @alt_names
|
|
|
|
[alt_names]
|
|
DNS.1 = localhost
|
|
DNS.2 = {{ ansible_hostname }}
|
|
DNS.3 = {{ inventory_hostname }}
|
|
IP.1 = 127.0.0.1
|
|
IP.2 = {{ access_ip | default(ansible_default_ipv4['address']) }}
|
|
IP.3 = {{ ip | default(ansible_default_ipv4['address']) }}
|