Add RotateCertificates to kubelet config if kubelet_rotate_certificates is set. (#5152)

Signed-off-by: Robin Elfrink <robin.elfrink@eu.equinix.com>
2019-10-16 13:31:41 +02:00 · 2019-10-16 13:31:41 +02:00 · faaff8bd72
parent 8031c6c1e7
commit faaff8bd72
1 changed files with 3 additions and 0 deletions
--- a/roles/kubernetes/node/templates/kubelet-config.v1beta1.yaml.j2
+++ b/roles/kubernetes/node/templates/kubelet-config.v1beta1.yaml.j2
@ -29,6 +29,9 @@ address: {{ kubelet_bind_address }}
 readOnlyPort: {{ kube_read_only_port }}
 kubeletCgroups: {{ kubelet_kubelet_cgroups }}
 clusterDomain: {{ dns_domain }}
+{% if kubelet_rotate_certificates|bool %}
+rotateCertificates: true
+{% endif %}
 {# DNS settings for kubelet #}
 {% if enable_nodelocaldns %}
 {% set kubelet_cluster_dns = [nodelocaldns_ip] %}