Note that all replicas of a component must share the same certificate.

pull/103/head
Chris Jones 2016-10-29 09:08:29 -06:00 committed by Kelsey Hightower
parent 26ff21f9d0
commit 753e71bac8
1 changed files with 1 additions and 1 deletions

View File

@ -118,7 +118,7 @@ openssl x509 -in ca.pem -text -noout
## Generate the single Kubernetes TLS Cert ## Generate the single Kubernetes TLS Cert
In this section we will generate a TLS certificate that will be valid for all Kubernetes components. This is being done for ease of use. In production you should strongly consider generating individual TLS certificates for each component. In this section we will generate a TLS certificate that will be valid for all Kubernetes components. This is being done for ease of use. In production you should strongly consider generating individual TLS certificates for each component. (But all replicas of a given component must share the same certificate.)
### Set the Kubernetes Public Address ### Set the Kubernetes Public Address