From 0c587ebf966307446b3e7a9094cd6c44bbca89e2 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sat, 20 Apr 2024 15:29:08 +0200 Subject: ch-apps: upgrade to kubernetes 1.30 and improve certificate handling for standalone kubelet --- roles/kubernetes/standalone/base/tasks/tls.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'roles/kubernetes/standalone/base/tasks') diff --git a/roles/kubernetes/standalone/base/tasks/tls.yml b/roles/kubernetes/standalone/base/tasks/tls.yml index 39952267..5603f8ec 100644 --- a/roles/kubernetes/standalone/base/tasks/tls.yml +++ b/roles/kubernetes/standalone/base/tasks/tls.yml @@ -68,7 +68,9 @@ openssl_csr: path: /etc/ssl/standalone-kubelet/server/csr.pem privatekey_path: /etc/ssl/standalone-kubelet/server/key.pem - CN: "{{ inventory_hostname }}" + CN: "{{ kubernetes_standalone_address | default('127.0.0.1') }}" + subject_alt_name: + - "IP:{{ kubernetes_standalone_address | default('127.0.0.1') }}" key_usage: - digitalSignature key_usage_critical: yes -- cgit v1.2.3