跳到主要内容

k8s

kubectl

QA

如何生成认证证书?

openssl genrsa -out admin.key 2048
openssl req -new -key admin.key -out admin.csr -subj "/CN=kubernetes-admin/O=system:masters"
openssl x509 -req -in admin.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out admin.crt -days 36500
cat admin.key | base64 | tr -d '\n'
cat admin.crt | base64 | tr -d '\n'