From a7c7662fb9d01ba9ff8bf97abee6cb2c4d8abfdc Mon Sep 17 00:00:00 2001 From: Juampy NR Date: Wed, 24 Feb 2021 10:06:02 +0100 Subject: [PATCH 1/2] Demonstrate how to use secure communication --- .../administer-cluster/configure-upgrade-etcd.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md index 25cd61a710..66c6c0f94a 100644 --- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md +++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md @@ -125,7 +125,16 @@ the URL schema. Similarly, to configure etcd with secure client communication, specify flags `--key-file=k8sclient.key` and `--cert-file=k8sclient.cert`, and use HTTPS as -the URL schema. +the URL schema. Here is an example on a client command that uses secure +communication: + +``` +ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 \ +--cert=/etc/kubernetes/pki/etcd/server.crt \ +--key=/etc/kubernetes/pki/etcd/server.key \ +--cacert=/etc/kubernetes/pki/etcd/ca.crt \ +member list +``` ### Limiting access of etcd clusters From 66e666f3072f43dd5c099a35ae9c3dc408382fb6 Mon Sep 17 00:00:00 2001 From: Juampy NR Date: Mon, 22 Mar 2021 11:36:40 +0100 Subject: [PATCH 2/2] Add indentation to the cert parameters --- .../tasks/administer-cluster/configure-upgrade-etcd.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md index 66c6c0f94a..4bfd4ddbe3 100644 --- a/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md +++ b/content/en/docs/tasks/administer-cluster/configure-upgrade-etcd.md @@ -130,10 +130,10 @@ communication: ``` ETCDCTL_API=3 etcdctl --endpoints 10.2.0.9:2379 \ ---cert=/etc/kubernetes/pki/etcd/server.crt \ ---key=/etc/kubernetes/pki/etcd/server.key \ ---cacert=/etc/kubernetes/pki/etcd/ca.crt \ -member list + --cert=/etc/kubernetes/pki/etcd/server.crt \ + --key=/etc/kubernetes/pki/etcd/server.key \ + --cacert=/etc/kubernetes/pki/etcd/ca.crt \ + member list ``` ### Limiting access of etcd clusters