whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #7024 from stewart-yu/patch-1

Browse Source 
Update certificates.md
This commit is contained in:
Qiming
2018-01-22 09:47:11 +08:00
committed by GitHub
parent e9db786ba7 39dce2aabd
commit 64b5ea9208
4 changed files with 4 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/concepts/cluster-administration/certificates.md
+1 -20
View File
@@ -8,26 +8,7 @@ title: Certificates
## Creating Certificates
When using client certificate authentication, you can generate certificates
using an existing deployment script or manually through `easyrsa`, `openssl`
or `cfssl`.
### Using an Existing Deployment Script
**Using an existing deployment script** is implemented at
`cluster/saltbase/salt/generate-cert/make-ca-cert.sh`.
Execute this script with two parameters. The first is the IP address
of API server. The second is a list of subject alternate names in the form `IP:<ip-address> or DNS:<dns-name>`.
The script generates three files: `ca.crt`, `server.crt`, and `server.key`.
Finally, add the following parameters into API server start parameters:
```
--client-ca-file=/srv/kubernetes/ca.crt
--tls-cert-file=/srv/kubernetes/server.crt
--tls-private-key-file=/srv/kubernetes/server.key
```
manually through `easyrsa`, `openssl` or `cfssl`.
### easyrsa