k8s证书之etcd,api,front-proxy配置文件

这几个文件，是要结合前面的master安装脚本的。

所以有的json文件中会出现一些LOCAL_HOSTS_L,THIS_HOST之类的变量。

如果手工单独使用这些文件，要将这些变量替换为合适的IP或域名。

切记切记。

apiserver.json

{
    "CN": "kube-apiserver",
    "hosts": [
    	"kubernetes",
    	"kubernetes.default",
    	"kubernetes.default.svc",
    	"kubernetes.default.svc.cluster.local",
    	"10.96.0.1",
    	"LOCAL_HOST_L",
      "THIS_HOST"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    }
}

ha-apiserver.json

{
    "CN": "kube-apiserver",
    "hosts": [
      "kubernetes",
      "kubernetes.default",
      "kubernetes.default.svc",
      "kubernetes.default.svc.cluster.local",
      "10.96.0.1",
      "LOCAL_HOST_L",
      "Domain_name",
      "HOST_1",
      "HOST_2",
      "HOST_3"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    }
}

 

apiserver-kubelet-client.json

{
    "CN": "kube-apiserver-kubelet-client",
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
		{
	    "O": "system:masters"
		}
    ]
}

etcd-server.json

{
    "CN": "etcdServer",
    "hosts": [
        "127.0.0.1",
        "localhost",
        "LOCAL_HOST_L",
        "THIS_HOST"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
            "O": "etcd",
            "OU": "etcd Security",
            "C": "CN",
            "L": "ShangHai",
            "ST": "ShangHai"
        }
    ]
}

ha-etcd-server.json

{
    "CN": "etcdServer",
    "hosts": [
        "127.0.0.1",
        "localhost",
        "LOCAL_HOST_L",
        "Domain_name",
        "HOST_1",
        "HOST_2",
        "HOST_3"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
            "O": "etcd",
            "OU": "etcd Security",
            "C": "CN",
            "L": "ShangHai",
            "ST": "ShangHai"
        }
    ]
}

 

etcd-peer.json

{
    "CN": "etcdPeer",
    "hosts": [
    "127.0.0.1",
    "localhost",
    "LOCAL_HOST_L",
    "Domain_name",
    "HOST_1",
    "HOST_2",
    "HOST_3"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
        "O": "etcd",
        "OU": "etcd Security",
            "C": "CN",
            "L": "ShangHai",
            "ST": "ShangHai"
        }
    ]
}

ha-etcd-peer.json

{
    "CN": "etcdPeer",
    "hosts": [
    "127.0.0.1",
    "localhost",
    "LOCAL_HOST_L",
    "Domain_name",
    "HOST_1",
    "HOST_2",
    "HOST_3"
    ],
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
        "O": "etcd",
        "OU": "etcd Security",
            "C": "CN",
            "L": "ShangHai",
            "ST": "ShangHai"
        }
    ]
}

 

etcd-client.json

{
    "CN": "etcdClient",
    "key": {
        "algo": "rsa",
        "size": 2048
    },
    "names": [
        {
        "O": "etcd",
        "OU": "etcd Security",
            "C": "CN",
            "L": "ShangHai",
            "ST": "ShangHai"
        }
    ]
}

front-proxy-client.json

{
    "CN": "front-proxy-client",
    "key": {
        "algo": "rsa",
        "size": 2048
    }
}

 

转载于:https://www.cnblogs.com/aguncn/p/10904725.html