Browse Source

Document etcd_ca_default_days in example inventories.

Andrew Butcher 8 years ago
parent
commit
aaf1c30265
2 changed files with 12 additions and 2 deletions
  1. 6 1
      inventory/byo/hosts.origin.example
  2. 6 1
      inventory/byo/hosts.ose.example

+ 6 - 1
inventory/byo/hosts.origin.example

@@ -757,13 +757,18 @@ openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true',
 # by deployment_type=origin
 #openshift_enable_origin_repo=false
 
-# Validity of the auto-generated certificates in days.
+# Validity of the auto-generated OpenShift certificates in days.
 # See also openshift_hosted_registry_cert_expire_days above.
 #
 #openshift_ca_cert_expire_days=1825
 #openshift_node_cert_expire_days=730
 #openshift_master_cert_expire_days=730
 
+# Validity of the auto-generated external etcd certificates in days.
+# Controls validity for etcd CA, peer, server and client certificates.
+#
+#etcd_ca_default_days=1825
+
 # host group for masters
 [masters]
 ose3-master[1:3]-ansible.test.example.com

+ 6 - 1
inventory/byo/hosts.ose.example

@@ -754,13 +754,18 @@ openshift_master_identity_providers=[{'name': 'htpasswd_auth', 'login': 'true',
 # Enable API service auditing, available as of 3.2
 #openshift_master_audit_config={"basicAuditEnabled": true}
 
-# Validity of the auto-generated certificates in days.
+# Validity of the auto-generated OpenShift certificates in days.
 # See also openshift_hosted_registry_cert_expire_days above.
 #
 #openshift_ca_cert_expire_days=1825
 #openshift_node_cert_expire_days=730
 #openshift_master_cert_expire_days=730
 
+# Validity of the auto-generated external etcd certificates in days.
+# Controls validity for etcd CA, peer, server and client certificates.
+#
+#etcd_ca_default_days=1825
+
 # host group for masters
 [masters]
 ose3-master[1:3]-ansible.test.example.com