{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/contrib/issues/2374","repository_url":"https://api.github.com/repos/kubernetes/contrib","labels_url":"https://api.github.com/repos/kubernetes/contrib/issues/2374/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/contrib/issues/2374/comments","events_url":"https://api.github.com/repos/kubernetes/contrib/issues/2374/events","html_url":"https://github.com/kubernetes/contrib/pull/2374","id":206496552,"number":2374,"title":"[Ansible] Etcd automatic cert generation","user":{"login":"galexrt","id":3718398,"avatar_url":"https://avatars.githubusercontent.com/u/3718398?v=3","gravatar_id":"","url":"https://api.github.com/users/galexrt","html_url":"https://github.com/galexrt","followers_url":"https://api.github.com/users/galexrt/followers","following_url":"https://api.github.com/users/galexrt/following{/other_user}","gists_url":"https://api.github.com/users/galexrt/gists{/gist_id}","starred_url":"https://api.github.com/users/galexrt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/galexrt/subscriptions","organizations_url":"https://api.github.com/users/galexrt/orgs","repos_url":"https://api.github.com/users/galexrt/repos","events_url":"https://api.github.com/users/galexrt/events{/privacy}","received_events_url":"https://api.github.com/users/galexrt/received_events","type":"User","site_admin":false},"labels":[{"id":344652606,"url":"https://api.github.com/repos/kubernetes/contrib/labels/area/ansible","name":"area/ansible","color":"009800","default":false},{"id":447087456,"url":"https://api.github.com/repos/kubernetes/contrib/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"bfe5bf","default":false}],"state":"open","locked":false,"assignee":{"login":"ingvagabund","id":8055242,"avatar_url":"https://avatars.githubusercontent.com/u/8055242?v=3","gravatar_id":"","url":"https://api.github.com/users/ingvagabund","html_url":"https://github.com/ingvagabund","followers_url":"https://api.github.com/users/ingvagabund/followers","following_url":"https://api.github.com/users/ingvagabund/following{/other_user}","gists_url":"https://api.github.com/users/ingvagabund/gists{/gist_id}","starred_url":"https://api.github.com/users/ingvagabund/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ingvagabund/subscriptions","organizations_url":"https://api.github.com/users/ingvagabund/orgs","repos_url":"https://api.github.com/users/ingvagabund/repos","events_url":"https://api.github.com/users/ingvagabund/events{/privacy}","received_events_url":"https://api.github.com/users/ingvagabund/received_events","type":"User","site_admin":false},"assignees":[{"login":"ingvagabund","id":8055242,"avatar_url":"https://avatars.githubusercontent.com/u/8055242?v=3","gravatar_id":"","url":"https://api.github.com/users/ingvagabund","html_url":"https://github.com/ingvagabund","followers_url":"https://api.github.com/users/ingvagabund/followers","following_url":"https://api.github.com/users/ingvagabund/following{/other_user}","gists_url":"https://api.github.com/users/ingvagabund/gists{/gist_id}","starred_url":"https://api.github.com/users/ingvagabund/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ingvagabund/subscriptions","organizations_url":"https://api.github.com/users/ingvagabund/orgs","repos_url":"https://api.github.com/users/ingvagabund/repos","events_url":"https://api.github.com/users/ingvagabund/events{/privacy}","received_events_url":"https://api.github.com/users/ingvagabund/received_events","type":"User","site_admin":false}],"milestone":null,"comments":10,"created_at":"2017-02-09T12:59:31Z","updated_at":"2017-02-17T17:03:50Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/kubernetes/contrib/pulls/2374","html_url":"https://github.com/kubernetes/contrib/pull/2374","diff_url":"https://github.com/kubernetes/contrib/pull/2374.diff","patch_url":"https://github.com/kubernetes/contrib/pull/2374.patch"},"body":"I played around with automatic certificate generation for etcd.\r\n\r\n**I haven't had time to test this yet**, but I can already say that switching an etcd cluster from http to https most likely would require some manual work (switching the etcd member urls to https).\r\n\r\nI would love to get some feedback on my changes for adding automatic etcd cert generation and hopefully see this merged to make securing etcd simpler using the Ansible deployment simpler.\r\n\r\nCurrently there aren't that many configurable variables added for the certificate generation, but this could be also implemented later on."},"comment":{"url":"https://api.github.com/repos/kubernetes/contrib/issues/comments/280707238","html_url":"https://github.com/kubernetes/contrib/pull/2374#issuecomment-280707238","issue_url":"https://api.github.com/repos/kubernetes/contrib/issues/2374","id":280707238,"user":{"login":"galexrt","id":3718398,"avatar_url":"https://avatars.githubusercontent.com/u/3718398?v=3","gravatar_id":"","url":"https://api.github.com/users/galexrt","html_url":"https://github.com/galexrt","followers_url":"https://api.github.com/users/galexrt/followers","following_url":"https://api.github.com/users/galexrt/following{/other_user}","gists_url":"https://api.github.com/users/galexrt/gists{/gist_id}","starred_url":"https://api.github.com/users/galexrt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/galexrt/subscriptions","organizations_url":"https://api.github.com/users/galexrt/orgs","repos_url":"https://api.github.com/users/galexrt/repos","events_url":"https://api.github.com/users/galexrt/events{/privacy}","received_events_url":"https://api.github.com/users/galexrt/received_events","type":"User","site_admin":false},"created_at":"2017-02-17T17:03:50Z","updated_at":"2017-02-17T17:03:50Z","body":"@jasonbrooks I added it in my latest push.\r\n\r\n***\r\n\r\nTo your last question:\r\nMy changes don't need a second (or more) nics, but the Vagrantfile creates `eth1` and tells Ansible to use it as  the default interface (see https://github.com/kubernetes/contrib/blob/master/ansible/vagrant/Vagrantfile#L209)"}}
{"actor":{"display_login":"galexrt"}}