Shulou(Shulou.com)06/02 Report--

In most cases, certificates are used for secure access to services (that is, https access). In kubernetes clusters, if anonymous access is turned off, cluster HTTPS access and TLS two-way authentication are enabled. For example, when HTTPS, a component of worker node, accesses apiserver service, Apiserver also needs to verify whether the client is legitimate. In this case, you need to generate kubeconfig authentication files for components on worker nodes to connect to apiserver.

1. Basic setting 1.1 variable sets PACKAGE=kubernetes-server-v1.12.0-linux-amd64.tar.gzK8S_DOWNLOAD_URL= https://github.com/devops-apps/download/raw/master/kubernetes/$PACKAGEK8S_CONF_PATH=/etc/k8s/kubernetesK8S_KUBECONFIG_PATH=/etc/k8s/kubeconfigKUBE_APISERVER=https://dev-kube-api.mo9.comBOOTSTRAP_TOKEN=$(head-c 16 / dev/urandom | od-An-t x | tr-d') 1.2 kubectl, Kubens tool set installs sudo wget $K8S_DOWNLOAD_URL-P / root/softwarecd $SOFTWARE tar-xzfkubernetes-server-v1.12.0-linux-amd64.tar.gz-C. / cp-fp kubernetes/server/bin/ {kubectl Kubens} / usr/local/sbin1.3 create authentication file storage directory if [!-d "$K8S_CONF_PATH"] Then mkdir-p $K8S_CONF_PATHfiif [!-d "$K8S_KUBECONFIG_PATH"]; then mkdir-p $K8S_KUBECONFIG_PATHfi2. Create TLS Bootstrapping Tokencat > ${K8S_CONF_PATH} / token.csv

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.