Update main.yml

roles/etcd/tasks/main.yml

@@ -11,6 +11,7 @@
 - name: 创建etcd证书请求
   template: src=etcd-csr.json.j2 dest={{ cluster_dir }}/ssl/etcd-csr.json
   connection: local
+  run_once: true
 
 - name: 创建 etcd证书和私钥
   shell: "cd {{ cluster_dir }}/ssl && {{ base_dir }}/bin/cfssl gencert \
@@ -19,6 +20,7 @@
         -config=ca-config.json \
         -profile=kubernetes etcd-csr.json | {{ base_dir }}/bin/cfssljson -bare etcd"
   connection: local
+  run_once: true
 
 - name: 分发etcd证书相关
   copy: src={{ cluster_dir }}/ssl/{{ item }} dest={{ ca_dir }}/{{ item }}