Skip to content
  • Manuel Cintron's avatar
    07b28940
    Adding ability to maintain existing Encryption Secrets at Rest. (#4255) · 07b28940
    Manuel Cintron authored
    * Adding ability to maintain existing Encryption Secrets at Rest.
    
    If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.
    
    This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.
    
    * Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.
    07b28940
    Adding ability to maintain existing Encryption Secrets at Rest. (#4255)
    Manuel Cintron authored
    * Adding ability to maintain existing Encryption Secrets at Rest.
    
    If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.
    
    This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.
    
    * Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.
Loading