mirrors/kubernetes-the-hard-way
1
0
Fork 0
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way.git synced 2025-12-19 03:08:57 +03:00
Code Issues Projects Releases Wiki Activity

chg: Hostnames In Documentation

Browse Source 
Changed server to controlplane and node-0 to node01, and node-1 to
node02 in the documentation.

Also started reformatting to limit lines to 80 characters.

Added a section on how to enable to root account for login.
This commit is contained in:
Khalifah Shabazz
2025-06-01 22:33:01 -04:00
parent 52a56e1a1d
commit 7945e68d92
8 changed files with 176 additions and 98 deletions
Download Patch File Download Diff File Expand all files Collapse all files

62
ca.conf
View File

@@ -9,8 +9,8 @@ keyUsage = cRLSign, keyCertSign
[req_distinguished_name]
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
CN = CA
[admin]
@@ -46,47 +46,47 @@ CN = service-accounts
# that identifies them as being in the `system:nodes` group, with a username
# of `system:node:<nodeName>`.
[node-0]
distinguished_name = node-0_distinguished_name
[node01]
distinguished_name = node01_distinguished_name
prompt = no
req_extensions = node-0_req_extensions
req_extensions = node01_req_extensions
[node-0_req_extensions]
[node01_req_extensions]
basicConstraints = CA:FALSE
extendedKeyUsage = clientAuth, serverAuth
keyUsage = critical, digitalSignature, keyEncipherment
nsCertType = client
nsComment = "Node-0 Certificate"
subjectAltName = DNS:node-0, IP:127.0.0.1
nsComment = "node01 Certificate"
subjectAltName = DNS:node01, IP:127.0.0.1
subjectKeyIdentifier = hash
[node-0_distinguished_name]
CN = system:node:node-0
[node01_distinguished_name]
CN = system:node:node01
O = system:nodes
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
[node-1]
distinguished_name = node-1_distinguished_name
[node02]
distinguished_name = node02_distinguished_name
prompt = no
req_extensions = node-1_req_extensions
req_extensions = node02_req_extensions
[node-1_req_extensions]
[node02_req_extensions]
basicConstraints = CA:FALSE
extendedKeyUsage = clientAuth, serverAuth
keyUsage = critical, digitalSignature, keyEncipherment
nsCertType = client
nsComment = "Node-1 Certificate"
subjectAltName = DNS:node-1, IP:127.0.0.1
nsComment = "node02 Certificate"
subjectAltName = DNS:node02, IP:127.0.0.1
subjectKeyIdentifier = hash
[node-1_distinguished_name]
CN = system:node:node-1
[node02_distinguished_name]
CN = system:node:node02
O = system:nodes
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
# Kube Proxy Section
@@ -108,8 +108,8 @@ subjectKeyIdentifier = hash
CN = system:kube-proxy
O = system:node-proxier
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
# Controller Manager
@@ -131,8 +131,8 @@ subjectKeyIdentifier = hash
CN = system:kube-controller-manager
O = system:kube-controller-manager
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
# Scheduler
@@ -154,8 +154,8 @@ subjectKeyIdentifier = hash
CN = system:kube-scheduler
O = system:system:kube-scheduler
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
# API Server
@@ -187,14 +187,14 @@ DNS.1 = kubernetes.default
DNS.2 = kubernetes.default.svc
DNS.3 = kubernetes.default.svc.cluster
DNS.4 = kubernetes.svc.cluster.local
DNS.5 = server.kubernetes.local
DNS.5 = controlplane.kubernetes.local
DNS.6 = api-server.kubernetes.local
[kube-api-server_distinguished_name]
CN = kubernetes
C = US
ST = Washington
L = Seattle
ST = Michigan
L = Redford
[default_req_extensions]