kubeadm: update section about CA certs in high-availability.md (#8917)
Added information to install cfssl and cfssljson on all etc nodes as they are required to generate clients certificates Change <podname> to <name> in static pod yaml description for etcd deployment Additionaly the first bash script in "Run kubeadm init on master0" section doesn't render correctly on kubernetes.io site (https://kubernetes.io/docs/setup/independent/high-availability/) but I don't see any pb with markdown.pull/8747/merge
parent
ff8df25935
commit
70dd13065b
|
@ -53,7 +53,7 @@ For **Option 2**: you can skip to the next step. Any reference to `etcd0`, `etcd
|
|||
|
||||
### Create etcd CA certs
|
||||
|
||||
1. Install `cfssl` and `cfssljson`:
|
||||
1. Install `cfssl` and `cfssljson` on all etcd nodes:
|
||||
|
||||
```bash
|
||||
curl -o /usr/local/bin/cfssl https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
|
||||
|
@ -278,7 +278,7 @@ Run the following to generate the manifest file:
|
|||
labels:
|
||||
component: etcd
|
||||
tier: control-plane
|
||||
name: <podname>
|
||||
name: <name>
|
||||
namespace: kube-system
|
||||
spec:
|
||||
containers:
|
||||
|
@ -339,7 +339,7 @@ Run the following to generate the manifest file:
|
|||
EOF
|
||||
|
||||
Make sure you replace:
|
||||
* `<podname>` with the name of the node you're running on (e.g. `etcd0`, `etcd1` or `etcd2`)
|
||||
* `<name>` with the name of the node you're running on (e.g. `etcd0`, `etcd1` or `etcd2`)
|
||||
* `<etcd0-ip-address>`, `<etcd1-ip-address>` and `<etcd2-ip-address>` with the public IPv4s of the other machines that host etcd.
|
||||
{{% /tab %}}
|
||||
{{< /tabs >}}
|
||||
|
|
Loading…
Reference in New Issue