mirrors
/
kubernetes-the-hard-way
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

arglebargle

pull/252/head
Mike Stevenson 2017-10-24 12:48:32 -07:00
parent 4d187fa038
commit 8afa40b1d1
1 changed files with 40 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
docs/04-certificate-authority.md
View File

@ -233,40 +233,40 @@ done
#### Windows #### Windows
``` ```
@(worker-0 worker-1 worker-2) | ForEach-Object { @('worker-0', 'worker-1', 'worker-2') | ForEach-Object {
New-Item $_-csr.json -Value @" New-Item $_-csr.json -Value @"
{ {
"CN": "system:node:$_", "CN": "system:node:$_",
"key": { "key": {
"algo": "rsa", "algo": "rsa",
"size": 2048 "size": 2048
}, },
"names": [ "names": [
{ {
"C": "US", "C": "US",
"L": "Portland", "L": "Portland",
"O": "system:nodes", "O": "system:nodes",
"OU": "Kubernetes The Hard Way", "OU": "Kubernetes The Hard Way",
"ST": "Oregon" "ST": "Oregon"
} }
] ]
} }
"@ "@
$EXTERNAL_IP=$(gcloud compute instances describe $_ ` $EXTERNAL_IP=$(gcloud compute instances describe $_ `
--format 'value(networkInterfaces[0].accessConfigs[0].natIP)') --format 'value(networkInterfaces[0].accessConfigs[0].natIP)')
$INTERNAL_IP=$(gcloud compute instances describe $_ ` $INTERNAL_IP=$(gcloud compute instances describe $_ `
--format 'value(networkInterfaces[0].networkIP)') --format 'value(networkInterfaces[0].networkIP)')
cfssl gencert ` cfssl gencert `
-ca=ca.pem ` -ca ca.pem `
-ca-key=ca-key.pem ` -ca-key ca-key.pem `
-config=ca-config.json ` -config ca-config.json `
-hostname=$_,$EXTERNAL_IP,$INTERNAL_IP ` -hostname $_,$EXTERNAL_IP,$INTERNAL_IP `
-profile=kubernetes ` -profile kubernetes `
$_-csr.json | cfssljson -bare $_ $_-csr.json | cfssljson -bare $_
} }
``` ```
Results: Results:
@ -343,10 +343,10 @@ cfssl gencert \
#### Windows #### Windows
``` ```
cfssl gencert ` cfssl gencert `
-ca=ca.pem ` -ca ca.pem `
-ca-key=ca-key.pem ` -ca-key ca-key.pem `
-config=ca-config.json ` -config ca-config.json `
-profile=kubernetes ` -profile kubernetes `
kube-proxy-csr.json | cfssljson -bare kube-proxy kube-proxy-csr.json | cfssljson -bare kube-proxy
``` ```
@ -439,11 +439,11 @@ cfssl gencert \
#### Windows #### Windows
``` ```
cfssl gencert ` cfssl gencert `
-ca=ca.pem ` -ca ca.pem `
-ca-key=ca-key.pem ` -ca-key ca-key.pem `
-config=ca-config.json ` -config ca-config.json `
-hostname=10.32.0.1,10.240.0.10,10.240.0.11,10.240.0.12,$KUBERNETES_PUBLIC_ADDRESS,127.0.0.1,kubernetes.default ` -hostname 10.32.0.1,10.240.0.10,10.240.0.11,10.240.0.12,$KUBERNETES_PUBLIC_ADDRESS,127.0.0.1,kubernetes.default `
-profile=kubernetes ` -profile kubernetes `
kubernetes-csr.json | cfssljson -bare kubernetes kubernetes-csr.json | cfssljson -bare kubernetes
``` ```