From 2c7c92b07ec58cafc7b1c225f106a63bc53dc6be Mon Sep 17 00:00:00 2001 From: Dalton Hubble Date: Wed, 11 May 2016 16:23:30 -0700 Subject: [PATCH] examples/etcd: Enable etcd strict reconfig check * Don't allow etcd clusters to reconfigure themselves to lose quorum --- examples/ignition/bootkube-master.yaml | 1 + examples/ignition/bootkube-worker.yaml | 1 + examples/ignition/etcd.yaml | 1 + examples/ignition/k8s-master.yaml | 1 + examples/ignition/k8s-worker.yaml | 1 + 5 files changed, 5 insertions(+) diff --git a/examples/ignition/bootkube-master.yaml b/examples/ignition/bootkube-master.yaml index a8b56868..6775964e 100644 --- a/examples/ignition/bootkube-master.yaml +++ b/examples/ignition/bootkube-master.yaml @@ -14,6 +14,7 @@ systemd: Environment="ETCD_LISTEN_CLIENT_URLS=http://0.0.0.0:2379" Environment="ETCD_LISTEN_PEER_URLS=http://{{.ipv4_address}}:2380" Environment="ETCD_INITIAL_CLUSTER={{.etcd_initial_cluster}}" + Environment="ETCD_STRICT_RECONFIG_CHECK=true" - name: flanneld.service enable: true dropins: diff --git a/examples/ignition/bootkube-worker.yaml b/examples/ignition/bootkube-worker.yaml index 07986f8a..8dcc3a24 100644 --- a/examples/ignition/bootkube-worker.yaml +++ b/examples/ignition/bootkube-worker.yaml @@ -14,6 +14,7 @@ systemd: Environment="ETCD_LISTEN_CLIENT_URLS=http://0.0.0.0:2379" Environment="ETCD_LISTEN_PEER_URLS=http://{{.ipv4_address}}:2380" Environment="ETCD_INITIAL_CLUSTER={{.etcd_initial_cluster}}" + Environment="ETCD_STRICT_RECONFIG_CHECK=true" - name: flanneld.service enable: true - name: fleet.service diff --git a/examples/ignition/etcd.yaml b/examples/ignition/etcd.yaml index 8bd54325..73d5141b 100644 --- a/examples/ignition/etcd.yaml +++ b/examples/ignition/etcd.yaml @@ -14,6 +14,7 @@ systemd: Environment="ETCD_LISTEN_CLIENT_URLS=http://0.0.0.0:2379" Environment="ETCD_LISTEN_PEER_URLS=http://{{.ipv4_address}}:2380" Environment="ETCD_INITIAL_CLUSTER={{.etcd_initial_cluster}}" + Environment="ETCD_STRICT_RECONFIG_CHECK=true" - name: fleet.service enable: true dropins: diff --git a/examples/ignition/k8s-master.yaml b/examples/ignition/k8s-master.yaml index 272ad708..caa58496 100644 --- a/examples/ignition/k8s-master.yaml +++ b/examples/ignition/k8s-master.yaml @@ -14,6 +14,7 @@ systemd: Environment="ETCD_LISTEN_CLIENT_URLS=http://0.0.0.0:2379" Environment="ETCD_LISTEN_PEER_URLS=http://{{.ipv4_address}}:2380" Environment="ETCD_INITIAL_CLUSTER={{.etcd_initial_cluster}}" + Environment="ETCD_STRICT_RECONFIG_CHECK=true" - name: fleet.service enable: true dropins: diff --git a/examples/ignition/k8s-worker.yaml b/examples/ignition/k8s-worker.yaml index efe484a7..5aff297a 100644 --- a/examples/ignition/k8s-worker.yaml +++ b/examples/ignition/k8s-worker.yaml @@ -14,6 +14,7 @@ systemd: Environment="ETCD_LISTEN_CLIENT_URLS=http://0.0.0.0:2379" Environment="ETCD_LISTEN_PEER_URLS=http://{{.ipv4_address}}:2380" Environment="ETCD_INITIAL_CLUSTER={{.etcd_initial_cluster}}" + Environment="ETCD_STRICT_RECONFIG_CHECK=true" - name: fleet.service enable: true dropins: