External-Mirrors/kubespray
2
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-04-03 17:25:17 -02:30
Code Issues Packages Projects Releases Wiki Activity

Fix #4237: update kube cert path (#4354)

Browse Source
This commit is contained in:
Dmitry Chepurovskiy
2019-03-18 09:55:11 +03:00
committed by Kubernetes Prow Robot
parent 38009a215a
commit ea7a6f1cf1
9 changed files with 15 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
contrib/terraform/openstack/README.md
View File

@@ -412,13 +412,13 @@ sudo route add -net [internal-subnet]/24 gw [router-ip]
```
3. List Kubernetes certificates & keys:
```
ssh [os-user]@[master-ip] sudo ls /etc/kubernetes/ssl/
ssh [os-user]@[master-ip] sudo ls /etc/kubernetes/pki/
```
4. Get `admin`'s certificates and keys:
```
ssh [os-user]@[master-ip] sudo cat /etc/kubernetes/ssl/admin-kube-master-1-key.pem > admin-key.pem
ssh [os-user]@[master-ip] sudo cat /etc/kubernetes/ssl/admin-kube-master-1.pem > admin.pem
ssh [os-user]@[master-ip] sudo cat /etc/kubernetes/ssl/ca.pem > ca.pem
ssh [os-user]@[master-ip] sudo cat /etc/kubernetes/pki/admin-kube-master-k8s-master-1-key.pem > admin-key.pem
ssh [os-user]@[master-ip] sudo cat /etc/kubernetes/pki/admin-kube-master-k8s-master-1.pem > admin.pem
ssh [os-user]@[master-ip] sudo cat /etc/kubernetes/pki/ca.pem > ca.pem
```
5. Configure kubectl:
```ShellSession

2
contrib/vault/roles/vault/defaults/main.yml
View File

@@ -114,7 +114,7 @@ vault_client_headers:
Content-Type: "application/json"
etcd_cert_dir: /etc/ssl/etcd/ssl
kube_cert_dir: /etc/kubernetes/ssl
kube_cert_dir: /etc/kubernetes/pki
vault_pki_mounts:
userpass:

4
contrib/vault/vault.md
View File

@@ -76,8 +76,8 @@ generated elsewhere, you'll need to copy the certificate and key to the hosts in
* ``/etc/ssl/etcd/ssl/ca.pem``
* ``/etc/ssl/etcd/ssl/ca-key.pem``
* kubernetes:
* ``/etc/kubernetes/ssl/ca.pem``
* ``/etc/kubernetes/ssl/ca-key.pem``
* ``/etc/kubernetes/pki/ca.pem``
* ``/etc/kubernetes/pki/ca-key.pem``
Additional Notes: