Custom kubernetes-ca role

2025-12-25 13:46:59 +01:00 · 2018-07-31 17:33:26 +02:00 · 2018-07-31 17:33:26 +02:00 · bb3a990c9a
commit bb3a990c9a
parent 956038220b
22 changed files with 855 additions and 3 deletions
--- a/roles/kubernetes-ca/templates/ca-k8s-apiserver-config.json.j2
+++ b/roles/kubernetes-ca/templates/ca-k8s-apiserver-config.json.j2
@ -0,0 +1,18 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "{{ ca_k8s_apiserver_expiry }}"
+    },
+    "profiles": {
+      "kubernetes": {
+         "usages": [
+            "signing",
+            "key encipherment",
+            "server auth",
+            "client auth"
+          ],
+          "expiry": "{{ ca_k8s_apiserver_expiry }}"
+      }
+    }
+  }
+}