Skip to content
Snippets Groups Projects
  1. Feb 19, 2019
    • Manuel Cintron's avatar
      Adding ability to maintain existing Encryption Secrets at Rest. (#4255) · 07b28940
      Manuel Cintron authored
      * Adding ability to maintain existing Encryption Secrets at Rest.
      
      If secrets_encryption.yaml is present it will not be overriten with a new kube_encrypt_token.
      
      This should allow for it to be set ahead of a playbook running or maintain it if cluster.yml is ran on the same cluster and the ansible host does not have access to the secrets.
      
      * Setting existing kube_encrypt_token across all master nodes in case it was missing in one or more nodes.
      07b28940
  2. Dec 07, 2018
  3. Mar 15, 2018
    • Andreas Krüger's avatar
      Added option for encrypting secrets to etcd v.2 (#2428) · 3d6fd491
      Andreas Krüger authored
      * Added option for encrypting secrets to etcd
      
      * Fix keylength to 32
      
      * Forgot the default
      
      * Rename secrets.yaml to secrets_encryption.yaml
      
      * Fix static path for secrets file to use ansible variable
      
      * Rename secrets.yaml.j2 to secrets_encryption.yaml.j2
      
      * Base64 encode the token
      
      * Fixed merge error
      
      * Changed path to credentials dir
      
      * Update path to secrets file which is now readable inside the apiserver container. Set better file permissions
      
      * Add encryption option to k8s-cluster.yml
      3d6fd491
Loading