magnum/releasenotes/notes/configure-etcd-auth-bug-1759813-baac5e0fe8a2e97f.yaml
Spyros Trigazis a1fb448c3a k8s_fedora: Explicitly set etcd authentication
Set client and peer auth to true and add
trusted_ca configuration to enable authentication
via certs for both clients and other etcd members.

Change-Id: I1d0fbd6f89dc2e95e016299c5ce0c68eb4fe8e1a
Closes-Bug: #1759813
2018-03-29 11:36:26 +00:00

8 lines
300 B
YAML

---
fixes:
- |
Fix etcd configuration in k8s_fedora_atomic driver. Explicitly enable
client and peer authentication and set trusted CA (ETCD_TRUSTED_CA_FILE,
ETCD_PEER_TRUSTED_CA_FILE, ETCD_CLIENT_CERT_AUTH,
ETCD_PEER_CLIENT_CERT_AUTH). Only new clusters will benefit from the fix.