Update managing-tls-in-a-cluster.md to include fields in certificate signing request (or CSR) required by kubernetes.io/kubelet-serving signer policy
This commit is contained in:
@@ -76,11 +76,16 @@ cat <<EOF | cfssl genkey - | cfssljson -bare server
|
|||||||
"192.0.2.24",
|
"192.0.2.24",
|
||||||
"10.0.34.2"
|
"10.0.34.2"
|
||||||
],
|
],
|
||||||
"CN": "my-pod.my-namespace.pod.cluster.local",
|
"CN": "system:node:my-pod.my-namespace.pod.cluster.local",
|
||||||
"key": {
|
"key": {
|
||||||
"algo": "ecdsa",
|
"algo": "ecdsa",
|
||||||
"size": 256
|
"size": 256
|
||||||
}
|
},
|
||||||
|
"names": [
|
||||||
|
{
|
||||||
|
"O": "system:nodes"
|
||||||
|
}
|
||||||
|
]
|
||||||
}
|
}
|
||||||
EOF
|
EOF
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user