Sharing cert between kubernetes-ca and etcd-ca will dramatically
increase the complexity of updating etcd-ca cert. Therefore do the
separating CA work.
Test Plan:
0) General -- PASS
check the communication status between apiserver and etcd
check the etcd status and configuration on controllers
verify applications are upgraded
check certs are split
check certs are persisted
1) Deployment test on simplex -- PASS (changeset 31)
Lock/unlock simplex
Simplex spontaneous reboot
2) Deployment test on duplex -- PASS (changeset 31)
Switch active controller (changeset 33)
Reinstall controller and Swact (changeset 33)
3) Backup and restore starlingx platform on simplex -- PASS (changeset 31)
4) Backup and restore starlingx platform on duplex --
PASS with config-out-of-date on c0 (changeset 31)
retest in progress
5) Upgrade starlingx platform on simplex -- PASS (changeset 31)
6) Upgrade starlingx platform on duplex -- PASS
Story: 2008833
Task: 42320
Depends-on: https://review.opendev.org/#/c/800412/
Change-Id: Ic11a2cba27db03c07e0d748e093b5451482db380
Signed-off-by: yuchengde <chengde.yu@intel.com>
Signed-off-by: Michel Thebeau <Michel.Thebeau@windriver.com>
11be0f1615