Update managing-tls-in-a-cluster.md to include fields in certificate signing request (or CSR) required by kubernetes.io/kubelet-serving signer policy

This commit is contained in:
Tomas Dabašinskas
2020-10-07 23:17:47 +11:00
parent 3d23e421d2
commit ea3ed2b6e1
@@ -76,11 +76,16 @@ cat <<EOF | cfssl genkey - | cfssljson -bare server
"192.0.2.24",
"10.0.34.2"
],
"CN": "my-pod.my-namespace.pod.cluster.local",
"CN": "system:node:my-pod.my-namespace.pod.cluster.local",
"key": {
"algo": "ecdsa",
"size": 256
}
},
"names": [
{
"O": "system:nodes"
}
]
}
EOF
```