Shulou(Shulou.com)06/02 Report--

A lot of kubernetes certificates, here simple arrangement, plus diagrams, convenient for everyone to learn.

The central public key ca.pem and private key ca-key.pem. All subsequent certificates are signed by CA and used by different components of K8s:

Etcd: use ca.pem, etcd.pem, etc-key.pem.

Kube-apiserver: use ca.pem, kubernetes-key.pem, kubernetes.pem, admin.pem.

Kubelet: use ca.pem.

Kube-proxy: use ca.pem, kube-proxy-key.pem, kube-proxy.pem.

Kubectl: use ca.pem, admin-key.pem, admin.pem, use admin users.

Kube-controller-manager: use ca-key.pem, ca.pem.

Schedule: use apiserver's-- insecure port for communication without certificate configuration.

If there are any omissions and need to supplement, please leave a message for feedback!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.