From 59789ae02a1eb31d5d7e6411c8b7d5735d1e8482 Mon Sep 17 00:00:00 2001
From: Tomasz Majchrowski <34726569+towasz@users.noreply.github.com>
Date: Mon, 30 Apr 2018 13:48:17 +0200
Subject: [PATCH] ISSUE-2706: Provide consistent usage of
supplementary_addresses_in_ssl_keys across vault and script mode (#2707)
---
roles/kubernetes/secrets/tasks/gen_certs_vault.yml | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/roles/kubernetes/secrets/tasks/gen_certs_vault.yml b/roles/kubernetes/secrets/tasks/gen_certs_vault.yml
index 05afdfcf8..8c9d12384 100644
--- a/roles/kubernetes/secrets/tasks/gen_certs_vault.yml
+++ b/roles/kubernetes/secrets/tasks/gen_certs_vault.yml
@@ -52,6 +52,11 @@
"{{ hostvars[host]['ip'] }}",
{%- endif -%}
{%- endfor -%}
+ {%- if supplementary_addresses_in_ssl_keys is defined -%}
+ {%- for ip_item in supplementary_addresses_in_ssl_keys -%}
+ "{{ ip_item }}",
+ {%- endfor -%}
+ {%- endif -%}
"127.0.0.1","::1","{{ kube_apiserver_ip }}"
]
issue_cert_path: "{{ item }}"
@@ -112,6 +117,11 @@
"{{ hostvars[host]['ip'] }}",
{%- endif -%}
{%- endfor -%}
+ {%- if supplementary_addresses_in_ssl_keys is defined -%}
+ {%- for ip_item in supplementary_addresses_in_ssl_keys -%}
+ "{{ ip_item }}",
+ {%- endfor -%}
+ {%- endif -%}
"127.0.0.1","::1","{{ kube_apiserver_ip }}"
]
issue_cert_path: "{{ item }}"
--
GitLab