mirrors
/
kubernetes-the-hard-way
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

arglebargle

pull/252/head
Mike Stevenson 2017-10-24 12:48:32 -07:00
parent 4d187fa038
commit 8afa40b1d1
1 changed files with 40 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
docs/04-certificate-authority.md
View File

@ -233,40 +233,40 @@ done
#### Windows
```
@(worker-0 worker-1 worker-2) | ForEach-Object {
New-Item $_-csr.json -Value @"
{
"CN": "system:node:$_",
"key": {
"algo": "rsa",
"size": 2048
},
"names": [
{
"C": "US",
"L": "Portland",
"O": "system:nodes",
"OU": "Kubernetes The Hard Way",
"ST": "Oregon"
}
]
}
"@
@('worker-0', 'worker-1', 'worker-2') | ForEach-Object {
New-Item $_-csr.json -Value @"
{
"CN": "system:node:$_",
"key": {
"algo": "rsa",
"size": 2048
},
"names": [
{
"C": "US",
"L": "Portland",
"O": "system:nodes",
"OU": "Kubernetes The Hard Way",
"ST": "Oregon"
}
]
}
"@
$EXTERNAL_IP=$(gcloud compute instances describe $_ `
--format 'value(networkInterfaces[0].accessConfigs[0].natIP)')
$EXTERNAL_IP=$(gcloud compute instances describe $_ `
--format 'value(networkInterfaces[0].accessConfigs[0].natIP)')
$INTERNAL_IP=$(gcloud compute instances describe $_ `
--format 'value(networkInterfaces[0].networkIP)')
$INTERNAL_IP=$(gcloud compute instances describe $_ `
--format 'value(networkInterfaces[0].networkIP)')
cfssl gencert `
-ca=ca.pem `
-ca-key=ca-key.pem `
-config=ca-config.json `
-hostname=$_,$EXTERNAL_IP,$INTERNAL_IP `
-profile=kubernetes `
$_-csr.json | cfssljson -bare $_
}
cfssl gencert `
-ca ca.pem `
-ca-key ca-key.pem `
-config ca-config.json `
-hostname $_,$EXTERNAL_IP,$INTERNAL_IP `
-profile kubernetes `
$_-csr.json | cfssljson -bare $_
}
```
Results:
@ -343,10 +343,10 @@ cfssl gencert \
#### Windows
```
cfssl gencert `
-ca=ca.pem `
-ca-key=ca-key.pem `
-config=ca-config.json `
-profile=kubernetes `
-ca ca.pem `
-ca-key ca-key.pem `
-config ca-config.json `
-profile kubernetes `
kube-proxy-csr.json | cfssljson -bare kube-proxy
```
@ -439,11 +439,11 @@ cfssl gencert \
#### Windows
```
cfssl gencert `
-ca=ca.pem `
-ca-key=ca-key.pem `
-config=ca-config.json `
-hostname=10.32.0.1,10.240.0.10,10.240.0.11,10.240.0.12,$KUBERNETES_PUBLIC_ADDRESS,127.0.0.1,kubernetes.default `
-profile=kubernetes `
-ca ca.pem `
-ca-key ca-key.pem `
-config ca-config.json `
-hostname 10.32.0.1,10.240.0.10,10.240.0.11,10.240.0.12,$KUBERNETES_PUBLIC_ADDRESS,127.0.0.1,kubernetes.default `
-profile kubernetes `
kubernetes-csr.json | cfssljson -bare kubernetes
```