github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-25 12:17:52 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #42994 from Shawyeok/features/full-tls-etcd-cluster

Browse Source 
Automatic merge from submit-queue

Centos provider: generate SSL certificates for etcd cluster.

**What this PR does / why we need it**:
Support secure etcd cluster for centos provider, generate SSL certificates for etcd in default. Running it w/o SSL is exposing cluster data to everyone and is not recommended. [#39462](https://github.com/kubernetes/kubernetes/pull/39462#issuecomment-271601547)

/cc @jszczepkowski @zmerlynn 

**Release note**:
```release-note
Support secure etcd cluster for centos provider.
```
This commit is contained in:
Kubernetes Submit Queue
2017-03-28 09:02:26 -07:00
committed by GitHub
parent 3c5c1da290 c692b55b57
commit be4452cfce
10 changed files with 238 additions and 62 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cluster/gce/upgrade.sh
View File

@@ -130,7 +130,7 @@ function backfile-kubeletauth-certs() {
echo "${CA_KEY_BASE64}" | base64 -d > "${KUBE_TEMP}/pki/ca.key"
echo "${CA_CERT_BASE64}" | base64 -d > "${KUBE_TEMP}/pki/ca.crt"
(cd "${KUBE_TEMP}/pki"
download-cfssl
download-cfssl "${KUBE_TEMP}/cfssl"
cat <<EOF > ca-config.json
{
"signing": {