kubeadm: update section about CA certs in high-availability.md (#8917)

Added information to install cfssl and cfssljson on all etc nodes as they are required to generate clients certificates
Change <podname> to <name> in static pod yaml description for etcd deployment

Additionaly the first bash script in "Run kubeadm init on master0" section doesn't render correctly on kubernetes.io site (https://kubernetes.io/docs/setup/independent/high-availability/) but I don't see any pb with markdown.
This commit is contained in:
Vincent Lainé
2018-06-11 19:01:35 +02:00
committed by k8s-ci-robot
parent ff8df25935
commit 70dd13065b
@@ -53,7 +53,7 @@ For **Option 2**: you can skip to the next step. Any reference to `etcd0`, `etcd
### Create etcd CA certs ### Create etcd CA certs
1. Install `cfssl` and `cfssljson`: 1. Install `cfssl` and `cfssljson` on all etcd nodes:
```bash ```bash
curl -o /usr/local/bin/cfssl https://pkg.cfssl.org/R1.2/cfssl_linux-amd64 curl -o /usr/local/bin/cfssl https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
@@ -278,7 +278,7 @@ Run the following to generate the manifest file:
labels: labels:
component: etcd component: etcd
tier: control-plane tier: control-plane
name: <podname> name: <name>
namespace: kube-system namespace: kube-system
spec: spec:
containers: containers:
@@ -339,7 +339,7 @@ Run the following to generate the manifest file:
EOF EOF
Make sure you replace: Make sure you replace:
* `<podname>` with the name of the node you're running on (e.g. `etcd0`, `etcd1` or `etcd2`) * `<name>` with the name of the node you're running on (e.g. `etcd0`, `etcd1` or `etcd2`)
* `<etcd0-ip-address>`, `<etcd1-ip-address>` and `<etcd2-ip-address>` with the public IPv4s of the other machines that host etcd. * `<etcd0-ip-address>`, `<etcd1-ip-address>` and `<etcd2-ip-address>` with the public IPv4s of the other machines that host etcd.
{{% /tab %}} {{% /tab %}}
{{< /tabs >}} {{< /tabs >}}