search

chris-short / rak8s

Stand up a Raspberry Pi based Kubernetes cluster with Ansible
MIT License
365 stars 112 forks source link

K8S Join Token should be randomized #49

Open jimhopkinsjr opened 5 years ago

jimhopkinsjr commented 5 years ago

OS running on Ansible host:

NAME="Ubuntu"
VERSION="16.04.5 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.5 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

Ansible Version (ansible --version):

ansible 2.5.5
  config file = /media/psf/Home/git/personal/raspk8s/ansible.cfg
  configured module search path = [u'/home/jim/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/local/lib/python2.7/dist-packages/ansible
  executable location = /usr/local/bin/ansible
  python version = 2.7.12 (default, Nov 12 2018, 14:36:49) [GCC 5.4.0 20160609]

Uploaded logs showing errors(rak8s/.log/ansible.log)

Raspberry Pi Hardware Version:

B+

Raspberry Pi OS & Version (cat /etc/os-release):

Any

Detailed description of the issue:

groupvars/all.yml has the k8s join token hardcoded, this should be updated to use something like Ansible Password to generate and store on the users local system