airship/promenade
Code Issues Proposed changes

Merge "Add k8s certs to pki folder with standard names"

Browse Source
This commit is contained in:
Zuul
2025-09-18 16:15:03 +00:00
committed by Gerrit Code Review
parent bbb07d167c 0e2bdfaad1
commit 3d32e4d47b
21 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
promenade/templates/roles/common/etc/kubernetes/pki/apiserver-etcd-client.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='apiserver-etcd') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/apiserver-etcd-client.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='apiserver-etcd') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/apiserver-kubelet-client.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='apiserver-kubelet-client', default=config.get(schema='deckhand/Certificate/v1', name='apiserver')) }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/apiserver-kubelet-client.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='apiserver-kubelet-client', default=config.get(schema='deckhand/CertificateKey/v1', name='apiserver')) }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/apiserver.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='apiserver') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/apiserver.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='apiserver') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/ca.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' not in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') or 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateAuthority/v1', name='kubernetes') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/ca.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateAuthorityKey/v1', name='kubernetes') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/controller-manager-key.pem Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='controller-manager') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/controller-manager.pem Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='controller-manager') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/etcd/ca.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateAuthority/v1', name='kubernetes-etcd') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/etcd/healthcheck-client.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='apiserver-etcd') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/etcd/healthcheck-client.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='apiserver-etcd') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/front-proxy-ca.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateAuthority/v1', name='kubernetes-agg-api') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/front-proxy-ca.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateAuthorityKey/v1', name='kubernetes-agg-api') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/front-proxy-client.crt Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='apiserver-proxy') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/front-proxy-client.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='apiserver-proxy') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/sa.key Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/PrivateKey/v1', name='service-account') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/sa.pub Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/PublicKey/v1', name='service-account') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/scheduler-key.pem Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/CertificateKey/v1', name='scheduler') }}{%- endif %}

1
promenade/templates/roles/common/etc/kubernetes/pki/scheduler.pem Normal file
View File

@@ -0,0 +1 @@
{%- if 'kubeadm=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') and 'kubernetes-apiserver=enabled' in config.get_first('Genesis:labels.dynamic', 'KubernetesNode:labels.dynamic') %}{{ config.get(schema='deckhand/Certificate/v1', name='scheduler') }}{%- endif %}