whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove instructions to copy Etcd CA key in HA (#17611)

Browse Source 
* Remove instructions to copy Etcd CA key in HA

No need to copy etcd CA key when manually copying certs from first master node to nodes joining the control plane.

* ca.key still needed for stacked ETCD

Added note to quote/unquote the copying instructions depending on Etcd configuration
This commit is contained in:
yacinelazaar
2019-11-18 02:53:41 +01:00
committed by Kubernetes Prow Robot
parent 6ec1a38ed0
commit a6a505fb73
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md
+2
View File
@@ -345,6 +345,7 @@ SSH is required if you want to control all nodes from a single machine.
scp /etc/kubernetes/pki/front-proxy-ca.crt "${USER}"@$host:
scp /etc/kubernetes/pki/front-proxy-ca.key "${USER}"@$host:
scp /etc/kubernetes/pki/etcd/ca.crt "${USER}"@$host:etcd-ca.crt
# Quote this line if you are using external etcd
scp /etc/kubernetes/pki/etcd/ca.key "${USER}"@$host:etcd-ca.key
done
```
@@ -368,6 +369,7 @@ SSH is required if you want to control all nodes from a single machine.
mv /home/${USER}/front-proxy-ca.crt /etc/kubernetes/pki/
mv /home/${USER}/front-proxy-ca.key /etc/kubernetes/pki/
mv /home/${USER}/etcd-ca.crt /etc/kubernetes/pki/etcd/ca.crt
# Quote this line if you are using external etcd
mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key
```
{{% /capture %}}