public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-28 05:59:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

Include CSR example

Browse Source 
To fix https://github.com/rancher/rke/issues/2550
This commit is contained in:
Ansil H
2021-05-31 22:13:48 +05:30
committed by GitHub
parent 411f1a1f8d
commit a6a6a5ec8e
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rke/latest/en/cert-mgmt/_index.md
+13
View File
@@ -108,3 +108,16 @@ INFO[0001] [certificates] Generating etcd-zzzzz certificate and key
INFO[0001] Successfully Deployed state file at [./cluster.rkestate] INFO[0001] Successfully Deployed state file at [./cluster.rkestate]
INFO[0001] Rebuilding Kubernetes cluster with rotated certificates INFO[0001] Rebuilding Kubernetes cluster with rotated certificates
``` ```
### Optional settings
Use [extra_args]({{<baseurl>}}rke/latest/en/config-options/services/services-extras/#extra-args) to enable optional settings of each [services]({{<baseurl>}}/rke/latest/en/config-options/services/) that needs certificates and keys.
For example, to enable [Certificate Management](https://kubernetes.io/docs/tasks/tls/managing-tls-in-a-cluster/), add `cluster-signing-cert-file` & `cluster-signing-key-file` to kube-controller in `cluster.yml` file.
```
services:
kube-controller:
extra_args:
cluster-signing-cert-file: "/etc/kubernetes/ssl/kube-ca.pem"
cluster-signing-key-file: "/etc/kubernetes/ssl/kube-ca-key.pem"
```