From 77cc14e86a113ecb18638d3357ec0456b84fa9d3 Mon Sep 17 00:00:00 2001 From: Rory McCune Date: Mon, 3 Apr 2017 18:59:08 +0100 Subject: [PATCH] Add Authentication to etcd configuration Added two flags needed to activate client and peer authentication in etcd --- docs/04-etcd.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/04-etcd.md b/docs/04-etcd.md index 6aacc6c..69897d8 100644 --- a/docs/04-etcd.md +++ b/docs/04-etcd.md @@ -91,6 +91,8 @@ ExecStart=/usr/bin/etcd \\ --peer-key-file=/etc/etcd/kubernetes-key.pem \\ --trusted-ca-file=/etc/etcd/ca.pem \\ --peer-trusted-ca-file=/etc/etcd/ca.pem \\ + --peer-client-cert-auth \\ + --client-cert-auth \\ --initial-advertise-peer-urls https://${INTERNAL_IP}:2380 \\ --listen-peer-urls https://${INTERNAL_IP}:2380 \\ --listen-client-urls https://${INTERNAL_IP}:2379,http://127.0.0.1:2379 \\