mirrors
/
kubernetes-the-hard-way
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

add aws support

pull/48/merge
Kelsey Hightower 2016-09-10 18:49:06 -07:00
parent 14b5ec9af1
commit 5a607d5d11
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
docs/02-certificate-authority.md
View File

@ -120,13 +120,27 @@ openssl x509 -in ca.pem -text -noout
In this section we will generate a TLS certificate that will be valid for all Kubernetes components. This is being done for ease of use. In production you should strongly consider generating individual TLS certificates for each component. In this section we will generate a TLS certificate that will be valid for all Kubernetes components. This is being done for ease of use. In production you should strongly consider generating individual TLS certificates for each component.
Create the `kubernetes-csr.json` file: ### Set the Kubernetes Public IP Address
#### GCE
``` ```
export KUBERNETES_PUBLIC_IP_ADDRESS=$(gcloud compute addresses describe kubernetes \ export KUBERNETES_PUBLIC_IP_ADDRESS=$(gcloud compute addresses describe kubernetes \
--format 'value(address)') --format 'value(address)')
``` ```
#### AWS
```
export KUBERNETES_PUBLIC_IP_ADDRESS=$(aws ec2 allocate-address \
--domain vpc | \
jq -r '.PublicIp')
```
---
Create the `kubernetes-csr.json` file:
``` ```
cat > kubernetes-csr.json <<EOF cat > kubernetes-csr.json <<EOF
{ {