+Andy
From: Yu, Chengde chengde.yu@intel.com Sent: Monday, August 2, 2021 4:10 AM To: starlingx-discuss@lists.starlingx.io; Church, Robert Robert.Church@windriver.com; Ngo, Tee Tee.Ngo@windriver.com; Khalil, Ghada Ghada.Khalil@windriver.com; Victor Portal, Joao Joao.VictorPortal@windriver.com Cc: Liu, ZhipengS zhipengs.liu@intel.com Subject: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd"
[Please note: This e-mail is from an EXTERNAL e-mail address] Hi Bob, Tee, Ghada, Joao: Starlingx shares same certificate between kubernetes-ca and etcd-ca. It will dramatically increase the complexity of updating etcd-ca cert. Therefore do the separating CA work. Need your help to check and review. Thanks
Please refer to patches below https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/ansible-playbooks/*/800412__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIEGOOMOk$ https://review.opendev.org/c/starlingx/stx-puppet/+/799569https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/stx-puppet/*/799569__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIZBgJR4U$
Best Regard Chant Yu