public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-28 05:59:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add cert info/links for kubelet serving cert

Browse Source
This commit is contained in:
Sebastiaan van Steenis
2021-05-16 19:12:39 +02:00
parent 4d0d81b9ba
commit 4eb05df1b1
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rke/latest/en/cert-mgmt/_index.md
+2 -1
View File
@@ -23,7 +23,8 @@ By default, Kubernetes clusters require certificates and RKE will automatically
After the certificates are rotated, the Kubernetes components are automatically restarted. Certificates can be rotated for the following services: After the certificates are rotated, the Kubernetes components are automatically restarted. Certificates can be rotated for the following services:
- etcd - etcd
- kubelet - kubelet (node certificate)
- kubelet (serving certificate, if [enabled]({{<baseurl>}}/rke/latest/en/config-options/services/#kubelet-options))
- kube-apiserver - kube-apiserver
- kube-proxy - kube-proxy
- kube-scheduler - kube-scheduler
content/rke/latest/en/example-yamls/_index.md
+3
View File
@@ -185,6 +185,9 @@ services:
cluster_dns_server: 10.43.0.10 cluster_dns_server: 10.43.0.10
# Fail if swap is on # Fail if swap is on
fail_swap_on: false fail_swap_on: false
# Generate a certificate signed by the kube-ca Certificate Authority
# for the kubelet to use as a server certificate
generate_serving_certificate: true
# Set max pods to 250 instead of default 110 # Set max pods to 250 instead of default 110
extra_args: extra_args:
max-pods: 250 max-pods: 250