Description of problem: For embedded-etcd env, certificate redeploy playbooks wouldn't redeploy the etcd client certificates files: master.etcd-client.crt and master.etcd-client.key. Version-Release number of selected component (if applicable): openshift-ansible-3.5.5-1.git.0.3ae2138.el7.noarch How reproducible: Always Steps to Reproduce: 1.Run 'ansible-playbook -i host playbooks/byo/openshift-cluster/redeploy-etcd-certificates.yml' or 'ansible-playbook -i host playbooks/byo/openshift-cluster/redeploy-master-certificates.yml' Actual results: It's a little hard to say which playbook should redeploy the two etcd client certificates files in embedded-etcd env, but none of them did that. Expected results: Additional info:
Commit pushed to master at https://github.com/openshift/openshift-ansible https://github.com/openshift/openshift-ansible/commit/eacd7148d34a0410407819a41bccdb7ec34bec2e Merge pull request #3331 from abutcher/embedded-etcd-client-cert Bug 1420667: Ensure etcd client certs are regenerated with embedded etcd.
Verify this bug with openshift-ansible-3.5.7-1.git.0.5010dec.el7.noarch.rpm After redeploy master certificates in embedded-etcd env, master.etcd-client.crt and master.etcd-client.key files also were replaced.