restart kubelet & salt-minion on cert change (bsc#1131568)

SUSE / caasp-salt

A collection of salt states used to provision a kubernetes cluster

Apache License 2.0

64 stars 29 forks source link

restart kubelet & salt-minion on cert change (bsc#1131568) #771

Closed dannysauer closed 5 years ago

dannysauer commented 5 years ago

Update kubernetes orchestration to restart kublet and salt-minion processes when the CA store changes. Also fix cert-specific orchestration

This is "finishing" the User-provided SSL cert feature (SUSE/caasp-playground#170 and SUSE/caasp-playground#171). Once merged, will get added in to SUSE/kubic-salt-security-fixes#44 (link doesn't work, presumably because private repo).