whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kubeadm: add a note about the new --print-join-command flag.

Browse Source 
This is a new flag for the `kubeadm token create` command.
This commit is contained in:
Matt Moyer
2017-11-21 22:17:02 -06:00
committed by Peter (XiangPeng) Zhao
parent 5de50c956c
commit d26415c13e
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/generated/kubeadm.md
+4 -4
View File
@@ -321,10 +321,10 @@ Here's an example on how to use it:
The CA key hash is used to verify the full root CA certificate discovered during
token-based bootstrapping. It has the format `sha256:<hex_encoded_hash>`. By
default, the hash value is returned in the `kubeadm join` command printed at the
end of `kubeadm init`. It is in a standard format (see
[RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4)) and can also be
calculated by 3rd party tools or provisioning systems. For example, using the
OpenSSL CLI:
end of `kubeadm init` or in the output of `kubeadm token create --print-join-command`.
It is in a standard format (see [RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4))
and can also be calculated by 3rd party tools or provisioning systems. For
example, using the OpenSSL CLI:
`openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'`
_Skipping this flag is allowed in Kubernetes 1.8, but makes certain spoofing