From 2aa66eb12de71d0e72fc89d2cce58f62d0a257d3 Mon Sep 17 00:00:00 2001
From: Matthew Mosesohn <matthew.mosesohn@gmail.com>
Date: Sun, 30 Jun 2019 13:37:22 +0300
Subject: [PATCH] Default to refreshing kubeadm etcd key (#4931)

Change-Id: Icc0176773b6d581c43647de433214079440d7321
---
 roles/kubernetes/kubeadm/defaults/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/kubernetes/kubeadm/defaults/main.yml b/roles/kubernetes/kubeadm/defaults/main.yml
index 1f1169ad7..fb2a02baa 100644
--- a/roles/kubernetes/kubeadm/defaults/main.yml
+++ b/roles/kubernetes/kubeadm/defaults/main.yml
@@ -12,7 +12,7 @@ kube_override_hostname: >-
   {%- endif -%}
 
 # Requests a fresh upload of certificates from first master
-kubeadm_etcd_refresh_cert_key: false
+kubeadm_etcd_refresh_cert_key: true
 
 # Experimental kubeadm etcd deployment mode. Available only for new deployment
 etcd_kubeadm_enabled: false
-- 
GitLab