Update high-availability.md (#8752)
Cannot copy any apiserver* keys and certs, as they are generated on startup. If not, it results in an error from kubeadm ``` certificate apiserver is not signed by corresponding CA ```
This commit is contained in:
committed by
k8s-ci-robot
parent
77cf8d542b
commit
4e9a3590e7
@@ -494,9 +494,10 @@ Before running kubeadm on the other masters, you need to first copy the K8s CA c
|
||||
|
||||
1. Follow the steps in the [create ssh access](#create-ssh-access) section, but instead of adding to `etcd0`'s `authorized_keys` file, add them to `master0`.
|
||||
1. Once you've done this, run:
|
||||
|
||||
```bash
|
||||
scp root@<master0-ip-address>:/etc/kubernetes/pki/* /etc/kubernetes/pki
|
||||
rm apiserver.*
|
||||
rm /etc/kubernetes/pki/apiserver*
|
||||
```
|
||||
|
||||
### Option 2: Copy paste
|
||||
|
||||
Reference in New Issue
Block a user