diff options
| author | jkaurredhat <jkaur@redhat.com> | 2017-07-13 14:40:05 +0530 |
|---|---|---|
| committer | jkaurredhat <jkaur@redhat.com> | 2017-07-13 14:40:05 +0530 |
| commit | 61fbb6b57e41651beef6f226ae59683880c113c9 (patch) | |
| tree | f9e1761be972c6b7df98ad89175534cf10bef369 | |
| parent | 12654fbe2ff56e7ba9eab61554f86a4164052a18 (diff) | |
| download | openshift-61fbb6b57e41651beef6f226ae59683880c113c9.tar.gz openshift-61fbb6b57e41651beef6f226ae59683880c113c9.tar.bz2 openshift-61fbb6b57e41651beef6f226ae59683880c113c9.tar.xz openshift-61fbb6b57e41651beef6f226ae59683880c113c9.zip | |
Redeploy-certificates will fail for registry and router if user is not system:admin
Signed-off-by: jkaurredhat <jkaur@redhat.com>
| -rw-r--r-- | playbooks/common/openshift-cluster/redeploy-certificates/registry.yml | 1 | ||||
| -rw-r--r-- | playbooks/common/openshift-cluster/redeploy-certificates/router.yml | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml b/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml index 8c8062585..afd5463b2 100644 --- a/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml +++ b/playbooks/common/openshift-cluster/redeploy-certificates/registry.yml @@ -66,6 +66,7 @@ --signer-cert={{ openshift.common.config_base }}/master/ca.crt --signer-key={{ openshift.common.config_base }}/master/ca.key --signer-serial={{ openshift.common.config_base }}/master/ca.serial.txt + --config={{ mktemp.stdout }}/admin.kubeconfig --hostnames="{{ docker_registry_service_ip.results.clusterip }},docker-registry.default.svc,docker-registry.default.svc.cluster.local,{{ docker_registry_route_hostname }}" --cert={{ openshift.common.config_base }}/master/registry.crt --key={{ openshift.common.config_base }}/master/registry.key diff --git a/playbooks/common/openshift-cluster/redeploy-certificates/router.yml b/playbooks/common/openshift-cluster/redeploy-certificates/router.yml index 9f14f2d69..f46553a95 100644 --- a/playbooks/common/openshift-cluster/redeploy-certificates/router.yml +++ b/playbooks/common/openshift-cluster/redeploy-certificates/router.yml @@ -116,6 +116,7 @@ tls.crt="{{ mktemp.stdout }}/openshift-hosted-router-certificate.pem" tls.key="{{ mktemp.stdout }}/openshift-hosted-router-certificate.key" --type=kubernetes.io/tls + --config={{ mktemp.stdout }}/admin.kubeconfig --confirm -o json | {{ openshift.common.client_binary }} replace -f - |