46 lines
1.1 KiB
Plaintext
46 lines
1.1 KiB
Plaintext
{% if grains.cloud is defined %}
|
|
{% if grains.cloud == 'gce' %}
|
|
{% set cert_ip='_use_gce_external_ip_' %}
|
|
{% endif %}
|
|
{% if grains.cloud == 'aws' %}
|
|
{% set cert_ip='_use_aws_external_ip_' %}
|
|
{% endif %}
|
|
{% if grains.cloud == 'azure' %}
|
|
{% set cert_ip='_use_azure_dns_name_' %}
|
|
{% endif %}
|
|
{% if grains.cloud == 'vagrant' %}
|
|
{% set cert_ip=grains.ip_interfaces.eth1[0] %}
|
|
{% endif %}
|
|
{% if grains.cloud == 'vsphere' %}
|
|
{% set cert_ip=grains.ip_interfaces.eth0[0] %}
|
|
{% endif %}
|
|
{% endif %}
|
|
|
|
# If there is a pillar defined, override any defaults.
|
|
{% if pillar['cert_ip'] is defined %}
|
|
{% set cert_ip=pillar['cert_ip'] %}
|
|
{% endif %}
|
|
|
|
{% set certgen="make-cert.sh" %}
|
|
{% if cert_ip is defined %}
|
|
{% set certgen="make-ca-cert.sh" %}
|
|
{% endif %}
|
|
|
|
kube-cert:
|
|
group.present:
|
|
- system: True
|
|
|
|
kubernetes-cert:
|
|
cmd.script:
|
|
- unless: test -f /srv/kubernetes/server.cert
|
|
- source: salt://generate-cert/{{certgen}}
|
|
{% if cert_ip is defined %}
|
|
- args: {{cert_ip}}
|
|
- require:
|
|
- pkg: curl
|
|
{% endif %}
|
|
- cwd: /
|
|
- user: root
|
|
- group: root
|
|
- shell: /bin/bash
|