From 4e9a3590e752adbb1fd61659cb9a04a8f38a7837 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Gu=C3=B0laugur=20Stef=C3=A1n=20Egilsson?= Date: Fri, 15 Jun 2018 16:54:28 +0000 Subject: [PATCH] Update high-availability.md (#8752) Cannot copy any apiserver* keys and certs, as they are generated on startup. If not, it results in an error from kubeadm ``` certificate apiserver is not signed by corresponding CA ``` --- content/en/docs/setup/independent/high-availability.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/content/en/docs/setup/independent/high-availability.md b/content/en/docs/setup/independent/high-availability.md index 61ba8651d7..ceff01d0ed 100644 --- a/content/en/docs/setup/independent/high-availability.md +++ b/content/en/docs/setup/independent/high-availability.md @@ -494,9 +494,10 @@ Before running kubeadm on the other masters, you need to first copy the K8s CA c 1. Follow the steps in the [create ssh access](#create-ssh-access) section, but instead of adding to `etcd0`'s `authorized_keys` file, add them to `master0`. 1. Once you've done this, run: + ```bash scp root@:/etc/kubernetes/pki/* /etc/kubernetes/pki - rm apiserver.* + rm /etc/kubernetes/pki/apiserver* ``` ### Option 2: Copy paste