Confirm
Add Andy in review loop

 

From: Waines, Greg <Greg.Waines@windriver.com>
Sent: Monday, August 2, 2021 8:59 PM
To: Yu, Chengde <chengde.yu@intel.com>; starlingx-discuss@lists.starlingx.io; Church, Robert <Robert.Church@windriver.com>; Ngo, Tee <Tee.Ngo@windriver.com>; Khalil, Ghada <Ghada.Khalil@windriver.com>; Victor Portal, Joao <Joao.VictorPortal@windriver.com>; Ning, Antai (Andy) <Andy.Ning@windriver.com>
Cc: Liu, ZhipengS <zhipengs.liu@intel.com>
Subject: RE: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd"

 

+Andy

 

From: Yu, Chengde <chengde.yu@intel.com>
Sent: Monday, August 2, 2021 4:10 AM
To: starlingx-discuss@lists.starlingx.io; Church, Robert <Robert.Church@windriver.com>; Ngo, Tee <Tee.Ngo@windriver.com>; Khalil, Ghada <Ghada.Khalil@windriver.com>; Victor Portal, Joao <Joao.VictorPortal@windriver.com>
Cc: Liu, ZhipengS <zhipengs.liu@intel.com>
Subject: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd"

 

[Please note: This e-mail is from an EXTERNAL e-mail address]

Hi  Bob, Tee, Ghada, Joao:

Starlingx shares same certificate between kubernetes-ca and etcd-ca.

It will dramatically increase the complexity of updating etcd-ca cert.

Therefore do the separating CA work.

Need your help to check and review.

Thanks

 

Please refer to patches below

https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412

https://review.opendev.org/c/starlingx/stx-puppet/+/799569

 

 

Best Regard

Chant Yu