Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

已经安装完毕运行的集群,bsroot 证书被更改,没法同步到集群各个节点 #491

Open
pineking opened this issue Feb 6, 2017 · 2 comments

Comments

@pineking
Copy link
Contributor

pineking commented Feb 6, 2017

在已经运行的集群中,如果重新运行 bsroot.sh,bsroot 目录中的内容被更新,比如 bsroot/tls 中的证书会被 https://github.com/k8sp/sextant/blob/develop/scripts/common.sh#L222 中的 generate_tls_assets 重新生成, 而目前没有机制对现有集群各个节点做配置同步,导致的问题是,bootstrapper 中的 registry 使用的是新生成的证书,而各个集群节点的访问 registry 证书还是旧的。

@jiamliang
Copy link
Contributor

是不是增加一个判断,如果已经存在证书了,就不在生成证书?
貌似最开始的时候,是有这个逻辑的,但后来不知道为什么会把证书去掉了。

@pineking
Copy link
Contributor Author

pineking commented Feb 6, 2017

@jiamliang

  1. 像你所说,增加一个判断逻辑,不要重新生成证书
  2. 添加一个配置信息同步脚本,在客户端上运行

此问题类似 #379

This was referenced Feb 8, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants