From a6a505fb7394ec04ec38da22c85e2e5657337d8a Mon Sep 17 00:00:00 2001 From: yacinelazaar Date: Mon, 18 Nov 2019 02:53:41 +0100 Subject: [PATCH] Remove instructions to copy Etcd CA key in HA (#17611) * Remove instructions to copy Etcd CA key in HA No need to copy etcd CA key when manually copying certs from first master node to nodes joining the control plane. * ca.key still needed for stacked ETCD Added note to quote/unquote the copying instructions depending on Etcd configuration --- .../production-environment/tools/kubeadm/high-availability.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md b/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md index 1205ddfef6..c93186b28d 100644 --- a/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md +++ b/content/en/docs/setup/production-environment/tools/kubeadm/high-availability.md @@ -345,6 +345,7 @@ SSH is required if you want to control all nodes from a single machine. scp /etc/kubernetes/pki/front-proxy-ca.crt "${USER}"@$host: scp /etc/kubernetes/pki/front-proxy-ca.key "${USER}"@$host: scp /etc/kubernetes/pki/etcd/ca.crt "${USER}"@$host:etcd-ca.crt + # Quote this line if you are using external etcd scp /etc/kubernetes/pki/etcd/ca.key "${USER}"@$host:etcd-ca.key done ``` @@ -368,6 +369,7 @@ SSH is required if you want to control all nodes from a single machine. mv /home/${USER}/front-proxy-ca.crt /etc/kubernetes/pki/ mv /home/${USER}/front-proxy-ca.key /etc/kubernetes/pki/ mv /home/${USER}/etcd-ca.crt /etc/kubernetes/pki/etcd/ca.crt + # Quote this line if you are using external etcd mv /home/${USER}/etcd-ca.key /etc/kubernetes/pki/etcd/ca.key ``` {{% /capture %}}