23.1.1+1.28.5 (#60)

* fix role names in .github/workflows/release.yml

* fix typo in README

* clusterRoleBinding system:kube-apiserver needs to honor k8s_apiserver_csr_cn value for as username

.github/workflows/release.yml

@@ -13,7 +13,7 @@ on:
 
 defaults:
   run:
-    working-directory: 'githubixx.kubernetes-controller'
+    working-directory: 'githubixx.kubernetes_controller'
 
 jobs:
   release:
@@ -23,7 +23,7 @@ jobs:
       - name: Check out the codebase.
         uses: actions/checkout@v2
         with:
-          path: 'githubixx.kubernetes-controller'
+          path: 'githubixx.kubernetes_controller'
 
       - name: Set up Python 3.
         uses: actions/setup-python@v2

CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 23.1.1+1.28.5
+
+### BUGFIX
+
+- ClusterRoleBinding `system:kube-apiserver` needs to honor `k8s_apiserver_csr_cn` value for as username
+- Because of the previous change move `files/kube-apiserver-to-kubelet_cluster_role.yaml -> templates/rbac/kube-apiserver-to-kubelet_cluster_role.yaml.j2` and `files/kube-apiserver-to-kubelet_cluster_role_binding.yaml -> templates/rbac/kube-apiserver-to-kubelet_cluster_role_binding.yaml.j2` as both files became a Jinja2 template.
+
 ## 23.1.0+1.28.5
 
 ### MOLECULE
@@ -9,14 +16,14 @@
 
 ### OTHER CHANGES
 
-- fix permissions for temporary directory
-- adjust Github action because of Ansible Galaxy changes
+- Fix permissions for temporary directory
+- Adjust Github action because of Ansible Galaxy changes
 
 ## 23.0.0+1.28.5
 
 ### UPDATE
 
-- update `k8s_release` to `1.28.5`
+- Update `k8s_release` to `1.28.5`
 
 ### BREAKING
 

README.md

@@ -23,6 +23,13 @@ See full [CHANGELOG.md](https://github.com/githubixx/ansible-role-kubernetes-con
 
 **Recent changes:**
 
+## 23.1.1+1.28.5
+
+### BUGFIX
+
+- ClusterRoleBinding `system:kube-apiserver` needs to honor `k8s_apiserver_csr_cn` value for as username
+- Because of the previous change move `files/kube-apiserver-to-kubelet_cluster_role.yaml -> templates/rbac/kube-apiserver-to-kubelet_cluster_role.yaml.j2` and `files/kube-apiserver-to-kubelet_cluster_role_binding.yaml -> templates/rbac/kube-apiserver-to-kubelet_cluster_role_binding.yaml.j2` as both files became a Jinja2 template.
+
 ## 23.1.0+1.28.5
 
 ### MOLECULE
@@ -149,7 +156,7 @@ er on the Ansible controller host. Previously it was needed to prepare these fil
 
 ## Installation
 
-- Directly download from Github (Change into Ansible role directory before cloning. You can figure out the role path by using `ansible-config dump | grep DEFAULT_ROLES_PATH` command):
+- Directly download from Github (Change into Ansible roles directory before cloning. You can figure out the role path by using `ansible-config dump | grep DEFAULT_ROLES_PATH` command):
 `git clone https://github.com/githubixx/ansible-role-kubernetes-controller.git githubixx.kubernetes_controller`
 
 - Via `ansible-galaxy` command and download directly from Ansible Galaxy:

tasks/main.yml

@@ -314,17 +314,17 @@
       changed_when: false
 
     - name: Copy kube-apiserver-to-kubelet ClusterRole
-      ansible.builtin.copy:
-        src: "files/kube-apiserver-to-kubelet_cluster_role.yaml"
+      ansible.builtin.template:
+        src: "rbac/kube-apiserver-to-kubelet_cluster_role.yaml.j2"
         dest: "{{ k8s_ctl__tmp_dir.path }}/kube-apiserver-to-kubelet_cluster_role.yaml"
         mode: 0644
       run_once: true
       delegate_to: "{{ k8s_ctl_delegate_to }}"
       changed_when: false
 
     - name: Copy kube-apiserver-to-kubelet ClusterRoleBinding
-      ansible.builtin.copy:
-        src: "files/kube-apiserver-to-kubelet_cluster_role_binding.yaml"
+      ansible.builtin.template:
+        src: "rbac/kube-apiserver-to-kubelet_cluster_role_binding.yaml.j2"
         dest: "{{ k8s_ctl__tmp_dir.path }}/kube-apiserver-to-kubelet_cluster_role_binding.yaml"
         mode: 0644
       run_once: true

files/kube-apiserver-to-kubelet_cluster_role_binding.yaml → templates/rbac/kube-apiserver-to-kubelet_cluster_role_binding.yaml.j2

@@ -11,4 +11,4 @@ roleRef:
 subjects:
   - apiGroup: rbac.authorization.k8s.io
     kind: User
-    name: kubernetes
+    name: {{ k8s_apiserver_csr_cn }}