kubespray/roles/kubernetes/master/tasks/users-file.yml

---
- name: Make sure the users directory exits
  file:
    path: "{{ kube_users_dir }}"
    state: directory
    mode: o-rwx
    group: "{{ kube_cert_group }}"

- name: Populate users for basic auth in API
  template:
    src: known_users.csv.j2
    dest: "{{ kube_users_dir }}/known_users.csv"
    mode: 0640
    backup: yes
  notify: Master | set secret_changed
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-14 02:00:51 +08:00			`---`
			`- name: Make sure the users directory exits`
			`file:`
			`path: "{{ kube_users_dir }}"`
			`state: directory`
			`mode: o-rwx`
			`group: "{{ kube_cert_group }}"`

			`- name: Populate users for basic auth in API`
			`template:`
			`src: known_users.csv.j2`
			`dest: "{{ kube_users_dir }}/known_users.csv"`
Set filemode to 0640 (#2315) * Set filemode to 0640 weave-net.yml file is readable by all users on the host. It however contains the weave_password to encrypt all pod communication. It should only be readable by root. * Set mode 0640 on users_file with basic auth 2018-02-22 04:13:46 +08:00			`mode: 0640`
kubeadm support (#1631) * kubeadm support * move k8s master to a subtask * disable k8s secrets when using kubeadm * fix etcd cert serial var * move simple auth users to master role * make a kubeadm-specific env file for kubelet * add non-ha CI job * change ci boolean vars to json format * fixup * Update create-gce.yml * Update create-gce.yml * Update create-gce.yml 2017-09-14 02:00:51 +08:00			`backup: yes`
			`notify: Master \| set secret_changed`