From 7e2aafcc76cbda082cfe50973bd8164227289ac5 Mon Sep 17 00:00:00 2001
From: Spencer Smith <robertspencersmith@gmail.com>
Date: Fri, 26 May 2017 17:32:50 -0400
Subject: [PATCH] add direct path for cert in AWS with RHEL family
---
.../templates/manifests/kube-apiserver.manifest.j2 | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/roles/kubernetes/master/templates/manifests/kube-apiserver.manifest.j2 b/roles/kubernetes/master/templates/manifests/kube-apiserver.manifest.j2
index b0f1a2f53..982184764 100644
--- a/roles/kubernetes/master/templates/manifests/kube-apiserver.manifest.j2
+++ b/roles/kubernetes/master/templates/manifests/kube-apiserver.manifest.j2
@@ -105,6 +105,11 @@ spec:
- mountPath: {{ etcd_cert_dir }}
name: etcd-certs
readOnly: true
+{% if cloud_provider == 'aws' and ansible_os_family == 'RedHat' %}
+ - mountPath: /etc/ssl/certs/ca-bundle.crt
+ name: rhel-ca-bundle
+ readOnly: true
+{% endif %}
volumes:
- hostPath:
path: {{ kube_config_dir }}
@@ -115,3 +120,8 @@ spec:
- hostPath:
path: {{ etcd_cert_dir }}
name: etcd-certs
+{% if cloud_provider == 'aws' and ansible_os_family == 'RedHat' %}
+ - hostPath:
+ path: /etc/ssl/certs/ca-bundle.crt
+ name: rhel-ca-bundle
+{% endif %}
\ No newline at end of file
--
GitLab