scratch.md: Don't duplicate CA instructions

This commit is contained in:
George G
2016-07-15 13:38:14 +01:00
parent febeb5825b
commit c2f5bf2cc6
+4 -5
View File
@@ -208,11 +208,10 @@ You need to prepare several certs:
- The kubelets optionally need certs to identify themselves as clients of the master, and when - The kubelets optionally need certs to identify themselves as clients of the master, and when
serving its own API over HTTPS. serving its own API over HTTPS.
Unless you plan to have a real CA generate your certs, you will need to generate a root cert and use that to sign the master, kubelet, and kubectl certs. Unless you plan to have a real CA generate your certs, you will need
to generate a root cert and use that to sign the master, kubelet, and
- see function `create-certs` in `cluster/common.sh` kubectl certs. How to do this is described in the [authentication
- see also `cluster/saltbase/salt/generate-cert/make-ca-cert.sh` and documentation](/docs/admin/authentication/#creating-certificates).
`cluster/saltbase/salt/generate-cert/make-cert.sh`
You will end up with the following files (we will use these variables later on) You will end up with the following files (we will use these variables later on)