whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update high-availability.md (#8752)

Browse Source 
Cannot copy any apiserver* keys and certs, as they are generated on startup. If not, it results in an error from kubeadm

```
certificate apiserver is not signed by corresponding CA
```
This commit is contained in:
Guðlaugur Stefán Egilsson
2018-06-15 16:54:28 +00:00
committed by k8s-ci-robot
parent 77cf8d542b
commit 4e9a3590e7
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/setup/independent/high-availability.md
+2 -1
View File
@@ -494,9 +494,10 @@ Before running kubeadm on the other masters, you need to first copy the K8s CA c
1. Follow the steps in the [create ssh access](#create-ssh-access) section, but instead of adding to `etcd0`'s `authorized_keys` file, add them to `master0`. 1. Follow the steps in the [create ssh access](#create-ssh-access) section, but instead of adding to `etcd0`'s `authorized_keys` file, add them to `master0`.
1. Once you've done this, run: 1. Once you've done this, run:
```bash ```bash
scp root@<master0-ip-address>:/etc/kubernetes/pki/* /etc/kubernetes/pki scp root@<master0-ip-address>:/etc/kubernetes/pki/* /etc/kubernetes/pki
rm apiserver.* rm /etc/kubernetes/pki/apiserver*
``` ```
### Option 2: Copy paste ### Option 2: Copy paste