kubespray/roles/kubernetes/control-plane/tasks/kubelet-fix-client-cert-rot...

---
- name: Fixup kubelet client cert rotation 1/2
  lineinfile:
    path: "{{ kube_config_dir }}/kubelet.conf"
    regexp: '^    client-certificate-data: '
    line: '    client-certificate: /var/lib/kubelet/pki/kubelet-client-current.pem'
    backup: true
  notify:
    - "Control plane | reload kubelet"

- name: Fixup kubelet client cert rotation 2/2
  lineinfile:
    path: "{{ kube_config_dir }}/kubelet.conf"
    regexp: '^    client-key-data: '
    line: '    client-key: /var/lib/kubelet/pki/kubelet-client-current.pem'
    backup: true
  notify:
    - "Control plane | reload kubelet"
Fixup kubelet.conf to point to kubelet-client-current.pem (#7347) c9c0c01de019e502b2e73e6fd65e9bf52e063bb6 only fix the problem for new clusters Signed-off-by: Etienne Champetier <e.champetier@ateme.com> 2021-03-09 15:55:00 +08:00			`---`
			`- name: Fixup kubelet client cert rotation 1/2`
			`lineinfile:`
			`path: "{{ kube_config_dir }}/kubelet.conf"`
			`regexp: '^ client-certificate-data: '`
			`line: ' client-certificate: /var/lib/kubelet/pki/kubelet-client-current.pem'`
Do not use ‘yes/no’ for boolean values (#11472) Consistent boolean values in ansible playbooks 2024-08-28 13:30:56 +08:00			`backup: true`
Fixup kubelet.conf to point to kubelet-client-current.pem (#7347) c9c0c01de019e502b2e73e6fd65e9bf52e063bb6 only fix the problem for new clusters Signed-off-by: Etienne Champetier <e.champetier@ateme.com> 2021-03-09 15:55:00 +08:00			`notify:`
Rename master to control plane - non-breaking changes only (#11394) K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See https://github.com/kubernetes/community/blob/65d886bb3029e73d9729e1d4f27422a7985233ed/sig-architecture/naming/recommendations/001-master-control-plane.md 2024-09-06 14:56:19 +08:00			`- "Control plane \| reload kubelet"`
Fixup kubelet.conf to point to kubelet-client-current.pem (#7347) c9c0c01de019e502b2e73e6fd65e9bf52e063bb6 only fix the problem for new clusters Signed-off-by: Etienne Champetier <e.champetier@ateme.com> 2021-03-09 15:55:00 +08:00
			`- name: Fixup kubelet client cert rotation 2/2`
			`lineinfile:`
			`path: "{{ kube_config_dir }}/kubelet.conf"`
			`regexp: '^ client-key-data: '`
			`line: ' client-key: /var/lib/kubelet/pki/kubelet-client-current.pem'`
Do not use ‘yes/no’ for boolean values (#11472) Consistent boolean values in ansible playbooks 2024-08-28 13:30:56 +08:00			`backup: true`
Fixup kubelet.conf to point to kubelet-client-current.pem (#7347) c9c0c01de019e502b2e73e6fd65e9bf52e063bb6 only fix the problem for new clusters Signed-off-by: Etienne Champetier <e.champetier@ateme.com> 2021-03-09 15:55:00 +08:00			`notify:`
Rename master to control plane - non-breaking changes only (#11394) K8s is moving away from the "master" terminology, so kubespray should follow the same naming conventions. See https://github.com/kubernetes/community/blob/65d886bb3029e73d9729e1d4f27422a7985233ed/sig-architecture/naming/recommendations/001-master-control-plane.md 2024-09-06 14:56:19 +08:00			`- "Control plane \| reload kubelet"`