[ja] kube-etcd certificate requires additional SAN's

This commit is contained in:
Arhell
2022-02-11 00:35:54 +02:00
parent fef3dccc01
commit 8b234f8db0
@@ -63,8 +63,8 @@ CAの秘密鍵をクラスターにコピーしたくない場合、自身で全
必要な証明書: 必要な証明書:
| デフォルトCN | 親認証局 | 組織       | 種類 | ホスト名 (SAN) | | デフォルトCN | 親認証局 | 組織       | 種類 | ホスト名 (SAN) |
|-------------------------------|---------------------------|----------------|----------------------------------------|---------------------------------------------| |-------------------------------|---------------------------|----------------|----------------------------------------|-----------------------------------------------------|
| kube-etcd | etcd-ca | | server, client | `localhost`, `127.0.0.1` | | kube-etcd | etcd-ca | | server, client | `<hostname>`, `<Host_IP>`, `localhost`, `127.0.0.1` |
| kube-etcd-peer | etcd-ca | | server, client | `<hostname>`, `<Host_IP>`, `localhost`, `127.0.0.1` | | kube-etcd-peer | etcd-ca | | server, client | `<hostname>`, `<Host_IP>`, `localhost`, `127.0.0.1` |
| kube-etcd-healthcheck-client | etcd-ca | | client | | | kube-etcd-healthcheck-client | etcd-ca | | client | |
| kube-apiserver-etcd-client | etcd-ca | system:masters | client | | | kube-apiserver-etcd-client | etcd-ca | system:masters | client | |