tls: tell cluster admins how to enable the local signer

2017-04-06 14:06:08 -07:00
parent 74d5af68ae
commit 44f8466d09
1 changed files with 8 additions and 0 deletions
@@ -195,3 +195,11 @@ noted in the previous section and the reprecussions of issuing a specific
 certificate should be fully understood before granting this permission. See
 [here](/docs/admin/authentication#x509-client-certs) for information on how
 certificates interact with authentication.
+
+## A Note to Cluster Administrators
+
+This tutorial assumes that a signer is setup to serve the certificates API. The
+Kubernetes controller manager provides a default implementation of a signer. To
+enable it, pass the `--cluster-signing-cert-file` and
+`--cluster-signing-key-file` parameters to the controller manager with paths to
+your Certificate Authority's keypair.