Fix: kube-apiserver tag will overwrite secrets-at-rest token if used independently (#10460)

Signed-off-by: Jason Witkowski <jwitko1@gmail.com>
2023-09-21 09:55:29 -04:00 · 2023-09-21 09:55:29 -04:00 · 7b2586943b
parent f964b3438d
commit 7b2586943b
2 changed files with 2 additions and 2 deletions
--- a/roles/kubernetes/control-plane/tasks/encrypt-at-rest.yml
+++ b/roles/kubernetes/control-plane/tasks/encrypt-at-rest.yml
@ -38,5 +38,3 @@
    owner: root
    group: "{{ kube_cert_group }}"
    mode: 0640
-  tags:
-    - kube-apiserver
--- a/roles/kubernetes/control-plane/tasks/main.yml
+++ b/roles/kubernetes/control-plane/tasks/main.yml
@ -28,6 +28,8 @@
  import_tasks: encrypt-at-rest.yml
  when:
    - kube_encrypt_secret_data
+  tags:
+    - kube-apiserver

 - name: Install | Copy kubectl binary from download dir
  copy: