支持master证书添加公网ip和域名

roles/kube-master/defaults/main.yml

@@ -2,3 +2,9 @@
 TMP_ENDPOINTS: "{% for h in groups['etcd'] %}https://{{ h }}:2379,{% endfor %}"
 ETCD_ENDPOINTS: "{{ TMP_ENDPOINTS.rstrip(',') }}"
 
+# k8s 集群 master 节点证书配置，可以添加多个ip和域名（比如增加公网ip和域名）
+MASTER_CERT_HOSTS:
+  - "10.1.1.1"
+  - "k8s.test.io"
+  #- "61.182.11.41"
+  #- "www.test.com"

roles/kube-master/templates/kubernetes-csr.json.j2

@@ -5,6 +5,9 @@
     "{{ MASTER_IP }}",
     "{{ inventory_hostname }}",
     "{{ CLUSTER_KUBERNETES_SVC_IP }}",
+{% for HOST in MASTER_CERT_HOSTS %}
+    "{{ HOST }}",
+{% endfor %}
     "kubernetes",
     "kubernetes.default",
     "kubernetes.default.svc",