+Andy From: Yu, Chengde <chengde.yu@intel.com> Sent: Monday, August 2, 2021 4:10 AM To: starlingx-discuss@lists.starlingx.io; Church, Robert <Robert.Church@windriver.com>; Ngo, Tee <Tee.Ngo@windriver.com>; Khalil, Ghada <Ghada.Khalil@windriver.com>; Victor Portal, Joao <Joao.VictorPortal@windriver.com> Cc: Liu, ZhipengS <zhipengs.liu@intel.com> Subject: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd" [Please note: This e-mail is from an EXTERNAL e-mail address] Hi Bob, Tee, Ghada, Joao: Starlingx shares same certificate between kubernetes-ca and etcd-ca. It will dramatically increase the complexity of updating etcd-ca cert. Therefore do the separating CA work. Need your help to check and review. Thanks Please refer to patches below https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412<https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/ansible-playbooks/*/800412__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIEGOOMOk$> https://review.opendev.org/c/starlingx/stx-puppet/+/799569<https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/stx-puppet/*/799569__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIZBgJR4U$> Best Regard Chant Yu