whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kubeadm: add a note about the new --print-join-command flag.

Browse Source 
This is a new flag for the `kubeadm token create` command.
This commit is contained in:
Matt Moyer
2017-11-21 22:17:02 -06:00
committed by Peter (XiangPeng) Zhao
parent 5de50c956c
commit d26415c13e
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/generated/kubeadm.md
+4 -4
View File
@@ -321,10 +321,10 @@ Here's an example on how to use it:
The CA key hash is used to verify the full root CA certificate discovered during The CA key hash is used to verify the full root CA certificate discovered during
token-based bootstrapping. It has the format `sha256:<hex_encoded_hash>`. By token-based bootstrapping. It has the format `sha256:<hex_encoded_hash>`. By
default, the hash value is returned in the `kubeadm join` command printed at the default, the hash value is returned in the `kubeadm join` command printed at the
end of `kubeadm init`. It is in a standard format (see end of `kubeadm init` or in the output of `kubeadm token create --print-join-command`.
[RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4)) and can also be It is in a standard format (see [RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4))
calculated by 3rd party tools or provisioning systems. For example, using the and can also be calculated by 3rd party tools or provisioning systems. For
OpenSSL CLI: example, using the OpenSSL CLI:
`openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'` `openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'`
_Skipping this flag is allowed in Kubernetes 1.8, but makes certain spoofing _Skipping this flag is allowed in Kubernetes 1.8, but makes certain spoofing