public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-30 06:54:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

Brings some missing information

Browse Source
This commit is contained in:
resamaraschi
2020-06-09 12:07:17 -07:00
committed by Catherine Luse
parent 4eeb540544
commit a6871c6d76
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rke/latest/en/installation/certs/_index.md
+4 -2
View File
@@ -36,11 +36,13 @@ The following certificates must exist in the certificate directory.
| Kube Scheduler | kube-scheduler.pem | kube-scheduler-key.pem | | Kube Scheduler | kube-scheduler.pem | kube-scheduler-key.pem |
| Kube Proxy | kube-proxy.pem | kube-proxy-key.pem | | Kube Proxy | kube-proxy.pem | kube-proxy-key.pem |
| Kube Admin | kube-admin.pem | kube-admin-key.pem | | Kube Admin | kube-admin.pem | kube-admin-key.pem |
| Kube Node | kube-node.pem | kube-node-key.pem |
| Apiserver Proxy Client | kube-apiserver-proxy-client.pem | kube-apiserver-proxy-client-key.pem | | Apiserver Proxy Client | kube-apiserver-proxy-client.pem | kube-apiserver-proxy-client-key.pem |
| Etcd Nodes | kube-etcd-x-x-x-x.pem | kube-etcd-x-x-x-x-key.pem | | Etcd Nodes | kube-etcd-x-x-x-x.pem | kube-etcd-x-x-x-x-key.pem |
| Kube Api Request Header CA | kube-apiserver-requestheader-ca.pem | kube-apiserver-requestheader-ca-key.pem | | Kube Api Request Header CA | kube-apiserver-requestheader-ca.pem* | kube-apiserver-requestheader-ca-key.pem** |
| Service Account Token | - | kube-service-account-token-key.pem | | Service Account Token | - | kube-service-account-token-key.pem |
* Is the same as kube-ca.pem
** Is the same as kube-ca-key
## Generating Certificate Signing Requests (CSRs) and Keys ## Generating Certificate Signing Requests (CSRs) and Keys
If you want to create and sign the certificates by a real Certificate Authority (CA), you can use RKE to generate a set of Certificate Signing Requests (CSRs) and keys. Using the `rke cert generate-csr` command, you can generate the CSRs and keys. If you want to create and sign the certificates by a real Certificate Authority (CA), you can use RKE to generate a set of Certificate Signing Requests (CSRs) and keys. Using the `rke cert generate-csr` command, you can generate the CSRs and keys.