mirrors/kubernetes-the-hard-way
1
0
Fork 0
mirror of https://github.com/kelseyhightower/kubernetes-the-hard-way.git synced 2025-12-14 16:58:58 +03:00
Code Issues Projects Releases Wiki Activity

The chapter 'Provisioning a CA and Generating TLS Certificates' is updated.

Browse Source
This commit is contained in:
Pick1a1username
2019-02-17 18:46:15 +09:00
parent b00897fac3
commit 919d1dabb2
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/04-certificate-authority.md
View File

@@ -2,6 +2,9 @@
In this chapter, you will provision a [PKI Infrastructure](https://en.wikipedia.org/wiki/Public_key_infrastructure) using CloudFlare's PKI toolkit, [cfssl](https://github.com/cloudflare/cfssl), then use it to bootstrap a Certificate Authority, and generate TLS certificates for the following components: etcd, kube-apiserver, kube-controller-manager, kube-scheduler, kubelet, and kube-proxy.
**All procedures in this chapter should be done in `client-1`.**
## Certificate Authority
In this section you will provision a Certificate Authority that can be used to generate additional TLS certificates.