whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update certificates.md

Browse Source
This commit is contained in:
stewart-yu
2018-01-20 09:08:02 +08:00
parent 902179b98f
commit 00e821d14a
4 changed files with 3 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/concepts/cluster-administration/certificates.md
+1 -20
View File
@@ -8,26 +8,7 @@ title: Certificates
## Creating Certificates
When using client certificate authentication, you can generate certificates
using an existing deployment script or manually through `easyrsa`, `openssl`
or `cfssl`.
### Using an Existing Deployment Script
**Using an existing deployment script** is implemented at
`cluster/saltbase/salt/generate-cert/make-ca-cert.sh`.
Execute this script with two parameters. The first is the IP address
of API server. The second is a list of subject alternate names in the form `IP:<ip-address> or DNS:<dns-name>`.
The script generates three files: `ca.crt`, `server.crt`, and `server.key`.
Finally, add the following parameters into API server start parameters:
```
--client-ca-file=/srv/kubernetes/ca.crt
--tls-cert-file=/srv/kubernetes/server.crt
--tls-private-key-file=/srv/kubernetes/server.key
```
manually through `easyrsa`, `openssl` or `cfssl`.
### easyrsa