kubernetes
/
website
mirror of https://github.com/kubernetes/website.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #6167 from tengqm/certificate-fix 

Fix openssl command for generating apiserver cert
pull/6175/head
Qiming 2017-11-03 20:42:20 +08:00 committed by GitHub
parent d49a3dda8e 90fe42a2ff
commit 17330cd0c9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/concepts/cluster-administration/certificates.md
View File

@ -126,7 +126,9 @@ Finally, add the following parameters into API server start parameters:
openssl req -new -key server.key -out server.csr -config csr.conf openssl req -new -key server.key -out server.csr -config csr.conf
1. Generate the server certificate using the ca.key, ca.crt and server.csr: 1. Generate the server certificate using the ca.key, ca.crt and server.csr:
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 10000 openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
-CAcreateserial -out server.crt -days 10000 \
-extensions v3_ext -extfile csr.conf
1. View the certificate: 1. View the certificate:
openssl x509 -noout -text -in ./server.crt openssl x509 -noout -text -in ./server.crt