whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tls: tell cluster admins how to enable the local signer

Browse Source
This commit is contained in:
Mike Danese
2017-04-06 14:06:08 -07:00
committed by Andrew Chen
parent 74d5af68ae
commit 44f8466d09
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/tasks/tls/managing-tls-in-a-cluster.md
+8
View File
@@ -195,3 +195,11 @@ noted in the previous section and the reprecussions of issuing a specific
certificate should be fully understood before granting this permission. See certificate should be fully understood before granting this permission. See
[here](/docs/admin/authentication#x509-client-certs) for information on how [here](/docs/admin/authentication#x509-client-certs) for information on how
certificates interact with authentication. certificates interact with authentication.
## A Note to Cluster Administrators
This tutorial assumes that a signer is setup to serve the certificates API. The
Kubernetes controller manager provides a default implementation of a signer. To
enable it, pass the `--cluster-signing-cert-file` and
`--cluster-signing-key-file` parameters to the controller manager with paths to
your Certificate Authority's keypair.