docker2 k8s 签发证书环境准备 并签发ca证书 2

在10.4.7.200上安装

安装cfssl命令
wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
wget https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
wget https://pkg.cfssl.org/R1.2/cfssl-certinfo_linux-amd64
mv cfssl_linux-amd64 /usr/bin/cfssl
mv cfssljson_linux-amd64 /usr/bin/cfssljson
mv cfssl-certinfo_linux-amd64 /usr/bin/cfssl-certinfo
chmod +x /usr/bin/cfssl
chmod +x /usr/bin/cfssljson 
chmod +x /usr/bin/cfssl-certinfo
创建并生成ca证书
mkdir -p /opt/certs
vi ca-csr.json
{
    "CN": "k8stest",
    "hosts": [
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
            "C": "CN",
            "ST": "beijing",
            "L": "beijing",
            "O": "od",
            "OU": "ops"
        }
    ],
    "ca": {
        "expiry": "175200h"
}
}
生成证书
cfssl gencert -initca ca-csr.json | cfssljson -bare ca