epiphany
epiphany copied to clipboard
[FEATURE REQUEST] Use ansible openssl_* modules to regenerate k8s certificates
Is your feature request related to a problem? Please describe.
Currently shell
module with openssl
used to regenerate k8s control plane certificates with necessary date.
Describe the solution you'd like
As an improvement openssl_*
ansible modules can be used for this task, but only after switching to Python3 - #1593 and installation of python-cryptography dist package.
Describe alternatives you've considered None
Additional context See examples.
DoD checklist
- Changelog
- [ ] updated
- [ ] not needed
- COMPONENTS.md
- [ ] updated
- [ ] not needed
- Schema
- [ ] updated
- [ ] not needed
- Backport tasks
- [ ] created
- [ ] not needed
- Documentation
- [ ] added
- [ ] updated
- [ ] not needed
- [ ] Feature has automated tests
- [ ] Automated tests passed (QA pipelines)
- [ ] apply
- [ ] upgrade
- [ ] backup/restore
- [ ] Idempotency tested
- [ ] All conversations in PR resolved
- [ ] Solution meets requirements and is done according to design doc
- [ ] Usage compliant with license