d5ce5874e8
* Streamline path to certs dir * More fixes * Set path to etcd certs in kubernetes defaults instead
11 lines
260 B
YAML
11 lines
260 B
YAML
---
|
|
- name: Write secrets for encrypting secret data at rest
|
|
template:
|
|
src: secrets_encryption.yaml.j2
|
|
dest: "{{ kube_cert_dir }}/secrets_encryption.yaml"
|
|
owner: root
|
|
group: "{{ kube_cert_group }}"
|
|
mode: 0640
|
|
tags:
|
|
- kube-apiserver
|