github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-26 21:17:23 +00:00
Code Issues Projects Releases Wiki Activity

Amend two markdown errors in authentication.md

Browse Source 
Amend two markdown errors in authentication.md.
1, amend order list display error by enter a newline after the first sentence
2, add two backticks to make ``"@`date +%s`"`` display correctly
This commit is contained in:
qiaolei 2015-08-28 09:16:05 +08:00
parent 4d10def14f
commit c17977b6dd
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/admin/authentication.md
View File

@ -118,13 +118,14 @@ Finally, add these parameters
into apiserver start parameters. into apiserver start parameters.
**easyrsa** can be used to manually generate certificates for your cluster. **easyrsa** can be used to manually generate certificates for your cluster.
1. Download, unpack, and initialize the patched version of easyrsa3. 1. Download, unpack, and initialize the patched version of easyrsa3.
`curl -L -O https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz` `curl -L -O https://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz`
`tar xzf easy-rsa.tar.gz` `tar xzf easy-rsa.tar.gz`
`cd easy-rsa-master/easyrsa3` `cd easy-rsa-master/easyrsa3`
`./easyrsa init-pki` `./easyrsa init-pki`
1. Generate a CA. (--batch set automatic mode. --req-cn default CN to use.) 1. Generate a CA. (--batch set automatic mode. --req-cn default CN to use.)
`./easyrsa --batch "--req-cn=${MASTER_IP}@date +%s" build-ca nopass` ``./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass``
1. Generate server certificate and key. 1. Generate server certificate and key.
(build-server-full [filename]: Generate a keypair and sign locally for a client or server) (build-server-full [filename]: Generate a keypair and sign locally for a client or server)
`./easyrsa --subject-alt-name="${MASTER_IP}" build-server-full kubernetes-master nopass` `./easyrsa --subject-alt-name="${MASTER_IP}" build-server-full kubernetes-master nopass`
@ -137,6 +138,7 @@ into apiserver start parameters.
and add these into apiserver start parameters. and add these into apiserver start parameters.
**openssl** can also be use to manually generate certificates for your cluster. **openssl** can also be use to manually generate certificates for your cluster.
1. Generate a ca.key with 2048bit 1. Generate a ca.key with 2048bit
`openssl genrsa -out ca.key 2048` `openssl genrsa -out ca.key 2048`
1. According to the ca.key generate a ca.crt. (-days set the certificate effective time). 1. According to the ca.key generate a ca.crt. (-days set the certificate effective time).