[Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd"
Hi Bob, Tee, Ghada, Joao: Starlingx shares same certificate between kubernetes-ca and etcd-ca. It will dramatically increase the complexity of updating etcd-ca cert. Therefore do the separating CA work. Need your help to check and review. Thanks Please refer to patches below https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412 https://review.opendev.org/c/starlingx/stx-puppet/+/799569 Best Regard Chant Yu
+Andy From: Yu, Chengde <chengde.yu@intel.com> Sent: Monday, August 2, 2021 4:10 AM To: starlingx-discuss@lists.starlingx.io; Church, Robert <Robert.Church@windriver.com>; Ngo, Tee <Tee.Ngo@windriver.com>; Khalil, Ghada <Ghada.Khalil@windriver.com>; Victor Portal, Joao <Joao.VictorPortal@windriver.com> Cc: Liu, ZhipengS <zhipengs.liu@intel.com> Subject: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd" [Please note: This e-mail is from an EXTERNAL e-mail address] Hi Bob, Tee, Ghada, Joao: Starlingx shares same certificate between kubernetes-ca and etcd-ca. It will dramatically increase the complexity of updating etcd-ca cert. Therefore do the separating CA work. Need your help to check and review. Thanks Please refer to patches below https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412<https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/ansible-playbooks/*/800412__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIEGOOMOk$> https://review.opendev.org/c/starlingx/stx-puppet/+/799569<https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/stx-puppet/*/799569__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIZBgJR4U$> Best Regard Chant Yu
Confirm Add Andy in review loop From: Waines, Greg <Greg.Waines@windriver.com> Sent: Monday, August 2, 2021 8:59 PM To: Yu, Chengde <chengde.yu@intel.com>; starlingx-discuss@lists.starlingx.io; Church, Robert <Robert.Church@windriver.com>; Ngo, Tee <Tee.Ngo@windriver.com>; Khalil, Ghada <Ghada.Khalil@windriver.com>; Victor Portal, Joao <Joao.VictorPortal@windriver.com>; Ning, Antai (Andy) <Andy.Ning@windriver.com> Cc: Liu, ZhipengS <zhipengs.liu@intel.com> Subject: RE: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd" +Andy From: Yu, Chengde <chengde.yu@intel.com<mailto:chengde.yu@intel.com>> Sent: Monday, August 2, 2021 4:10 AM To: starlingx-discuss@lists.starlingx.io<mailto:starlingx-discuss@lists.starlingx.io>; Church, Robert <Robert.Church@windriver.com<mailto:Robert.Church@windriver.com>>; Ngo, Tee <Tee.Ngo@windriver.com<mailto:Tee.Ngo@windriver.com>>; Khalil, Ghada <Ghada.Khalil@windriver.com<mailto:Ghada.Khalil@windriver.com>>; Victor Portal, Joao <Joao.VictorPortal@windriver.com<mailto:Joao.VictorPortal@windriver.com>> Cc: Liu, ZhipengS <zhipengs.liu@intel.com<mailto:zhipengs.liu@intel.com>> Subject: [Starlingx-discuss] Please review the patch "Separate CA for k8s and etcd" [Please note: This e-mail is from an EXTERNAL e-mail address] Hi Bob, Tee, Ghada, Joao: Starlingx shares same certificate between kubernetes-ca and etcd-ca. It will dramatically increase the complexity of updating etcd-ca cert. Therefore do the separating CA work. Need your help to check and review. Thanks Please refer to patches below https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412<https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/ansible-playbooks/*/800412__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIEGOOMOk$> https://review.opendev.org/c/starlingx/stx-puppet/+/799569<https://urldefense.com/v3/__https:/review.opendev.org/c/starlingx/stx-puppet/*/799569__;Kw!!AjveYdw8EvQ!Ne6XW0_HdGX7bGvr0-JbzrKDgZyFvfWLSo_YEMj62wo8oO2Nm2MgzeVg1BGIZBgJR4U$> Best Regard Chant Yu
participants (2)
-
Waines, Greg
-
Yu, Chengde