mirrors
/
kubernetes-the-hard-way
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

The chapter 'Provisioning a CA and Generating TLS Certificates' is updated.

pull/443/head
Pick1a1username 2019-02-17 18:46:15 +09:00
parent b00897fac3
commit 919d1dabb2
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docs/04-certificate-authority.md
View File

@ -2,6 +2,9 @@
In this chapter, you will provision a [PKI Infrastructure](https://en.wikipedia.org/wiki/Public_key_infrastructure) using CloudFlare's PKI toolkit, [cfssl](https://github.com/cloudflare/cfssl), then use it to bootstrap a Certificate Authority, and generate TLS certificates for the following components: etcd, kube-apiserver, kube-controller-manager, kube-scheduler, kubelet, and kube-proxy.
**All procedures in this chapter should be done in `client-1`.**
## Certificate Authority
In this section you will provision a Certificate Authority that can be used to generate additional TLS certificates.