mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-12-05 15:37:35 +00:00
According to kubeadm repo ticket 1665, /etc/pki can contain subdirectories with private keys on some distros. Avoid mounting the entire /etc/pki and mount /etc/pki/ca-trust and /etc/pki/tls/certs instead. These directories are mounted as an extra locations which can be used to search for additional system CAs.