whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #28347 from Shubham82/fix-Certificate_Rotation_for_the_kubelet

Browse Source 
Correct the Configure Certificate Rotation for the Kubelet docs.
This commit is contained in:
Kubernetes Prow Robot
2021-06-21 04:52:51 -07:00
committed by GitHub
parent 64a7157643 deba5807c9
commit 12c57e6683
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/tasks/tls/certificate-rotation.md
+3 -3
View File
@@ -27,8 +27,8 @@ The kubelet uses certificates for authenticating to the Kubernetes API. By
default, these certificates are issued with one year expiration so that they do default, these certificates are issued with one year expiration so that they do
not need to be renewed too frequently. not need to be renewed too frequently.
Kubernetes 1.8 contains [kubelet certificate Kubernetes contains [kubelet certificate
rotation](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/), a beta feature rotation](/docs/reference/command-line-tools-reference/kubelet-tls-bootstrapping/),
that will automatically generate a new key and request a new certificate from that will automatically generate a new key and request a new certificate from
the Kubernetes API as the current certificate approaches expiration. Once the the Kubernetes API as the current certificate approaches expiration. Once the
new certificate is available, it will be used for authenticating connections to new certificate is available, it will be used for authenticating connections to
@@ -62,7 +62,7 @@ criteria, it will be auto approved by the controller manager, then it will have
a status of `Approved`. Next, the controller manager will sign a certificate, a status of `Approved`. Next, the controller manager will sign a certificate,
issued for the duration specified by the issued for the duration specified by the
`--cluster-signing-duration` parameter, and the signed certificate `--cluster-signing-duration` parameter, and the signed certificate
will be attached to the certificate signing requests. will be attached to the certificate signing request.
The kubelet will retrieve the signed certificate from the Kubernetes API and The kubelet will retrieve the signed certificate from the Kubernetes API and
write that to disk, in the location specified by `--cert-dir`. Then the kubelet write that to disk, in the location specified by `--cert-dir`. Then the kubelet