21 lines
834 B
Django/Jinja
21 lines
834 B
Django/Jinja
[req]
|
|
req_extensions = v3_req
|
|
distinguished_name = req_distinguished_name
|
|
[req_distinguished_name]
|
|
[ v3_req ]
|
|
basicConstraints = CA:FALSE
|
|
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
|
|
subjectAltName = @alt_names
|
|
[alt_names]
|
|
DNS.1 = kubernetes
|
|
DNS.2 = kubernetes.default
|
|
DNS.3 = kubernetes.default.svc.{{ dns_domain }}
|
|
{% for host in groups['kube-master'] %}
|
|
IP.{{ loop.index }} = {{ hostvars[host]['ip'] | default(hostvars[host]['ansible_default_ipv4']['address']) }}
|
|
{% endfor %}
|
|
{% set idx = groups['kube-master'] | length | int + 1 %}
|
|
IP.{{ idx | string }} = {{ kube_apiserver_ip }}
|
|
{% if kube_loadbalancer_ip is defined | default('') %}
|
|
{% set idx = idx | int + 1 %}
|
|
IP.{{ idx | string }} = {{ kube_loadbalancer }}
|
|
{% endif %}
|