Task: Gen_certs | Gather etcd node certs

[giridharmp]

Is this a BUG REPORT or FEATURE REQUEST? (choose one): BUG REPORT

Environment:

• Cloud provider or hardware configuration:
  AWS

• OS (printf "$(uname -srm)\n$(cat /etc/os-release)\n"):
  Linux 4.15.0-1021-aws x86_64
  NAME="Ubuntu"
  VERSION="18.04.1 LTS (Bionic Beaver)"
  ID=ubuntu
  ID_LIKE=debian
  PRETTY_NAME="Ubuntu 18.04.1 LTS"
  VERSION_ID="18.04"
  HOME_URL="https://www.ubuntu.com/"
  SUPPORT_URL="https://help.ubuntu.com/"
  BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
  PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
  VERSION_CODENAME=bionic
  UBUNTU_CODENAME=bionic

• Version of Ansible (ansible --version):
  ansible 2.7.0

Kubespray version (commit) (git rev-parse --short HEAD):
v2.7.0

Network plugin used:
Canal

Copy of your inventory file:
[all]
node1 ip=10.222.1.20 ansible_host=10.222.1.20 ansible_user=admin etcd_member_name=etcd1
node2 ip=10.222.4.249 ansible_host=10.222.4.249 ansible_user=admin etcd_member_name=etcd2
node3 ip=10.222.9.146 ansible_host=10.222.9.146 ansible_user=admin etcd_member_name=etcd3
node4 ip=10.222.0.16 ansible_host=10.222.0.16 ansible_user=admin
node5 ip=10.222.6.238 ansible_host=10.222.6.238 ansible_user=admin
node6 ip=10.222.9.227 ansible_host=10.222.9.227 ansible_user=admin

[kube-master]
node1
node2
node3

[etcd]
node1
node2
node3

[kube-node]
node4
node5
node6

[k8s-cluster:children]
kube-node
kube-master

[vault]
node1
node2
node3

[calico-rr]

Command used to invoke ansible:
ansible-playbook --flush-cache -i inventory/myproject/hosts.ini --become --become-user=root cluster.yml

Output of ansible run:

Anything else do we need to know:
When there are more worker nodes, the certificates created for the worker nodes in master-a is not getting copied to the worker nodes.
This is because of the code snippet in the task: Gen_certs | Gather etcd node certs in the task file /etcd/tasks/gen_certs_script.yml
The variable {{ inventory_hostname }} when used along with delegate_to: in the module slurp does not get resolved to the proper inventory_hostname. It always points to the first master node in the cluster.
History of the file shows that this change to use slurp module has been recently made.

[ant31]

ansible 2.7 is bugged. You should use 2.6 until ansible is fixed
related issue: ansible/ansible#46600