From a7792a6ae8027afc7a0923afbd2d24e908ae3695 Mon Sep 17 00:00:00 2001 From: "Lubomir I. Ivanov" Date: Tue, 29 Jan 2019 13:02:33 +0200 Subject: [PATCH] kubeadm: add a caution about certs in HA document (#12407) * kubeadm: add a caution about certs in HA document * Update content/en/docs/setup/independent/high-availability.md Co-Authored-By: neolit123 --- content/en/docs/setup/independent/high-availability.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/content/en/docs/setup/independent/high-availability.md b/content/en/docs/setup/independent/high-availability.md index bc7be36e30..10e0e2b32c 100644 --- a/content/en/docs/setup/independent/high-availability.md +++ b/content/en/docs/setup/independent/high-availability.md @@ -223,6 +223,12 @@ SSH is required if you want to control all nodes from a single machine. done ``` +{{< caution >}} +Copy only the certificates in the above list. kubeadm will take care of generating the rest of the certificates +with the required SANs for the joining control-plane instances. If you copy all the certificates by mistake, +the creation of additional nodes could fail due to a lack of required SANs. +{{< /caution >}} + ### Steps for the rest of the control plane nodes 1. Move the files created by the previous step where `scp` was used: