summaryrefslogtreecommitdiff
path: root/roles/kubernetes/kubeadm/master/tasks/primary-master.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/kubernetes/kubeadm/master/tasks/primary-master.yml')
-rw-r--r--roles/kubernetes/kubeadm/master/tasks/primary-master.yml17
1 files changed, 1 insertions, 16 deletions
diff --git a/roles/kubernetes/kubeadm/master/tasks/primary-master.yml b/roles/kubernetes/kubeadm/master/tasks/primary-master.yml
index 58658794..5efc91b5 100644
--- a/roles/kubernetes/kubeadm/master/tasks/primary-master.yml
+++ b/roles/kubernetes/kubeadm/master/tasks/primary-master.yml
@@ -53,7 +53,6 @@
fail:
msg: "upgrading cluster config is currently not supported!"
-
### cluster is already initialized
- name: prepare cluster for new nodes
@@ -76,22 +75,8 @@
check_mode: no
register: kubeadm_token_create
-##
-
-## this fixes the kubelet kubeconfig to make use of certificate rotation. This is a bug in
-## kubeadm init which was fixed with 1.17 release. TODO: remove this once all cluster have been
-## upgraded to 1.17 or newer.
-- name: fix kubeconfig of kubelet
- lineinfile:
- path: /etc/kubernetes/kubelet.conf
- backrefs: yes
- regexp: '^(\s*)client-{{ item }}(-data)?:'
- line: '\1client-{{ item }}: /var/lib/kubelet/pki/kubelet-client-current.pem'
- with_items:
- - certificate
- - key
- notify: restart kubelet
+## calculate certificate digest
- name: install openssl
apt: