Kubernetes component related certificate diagram
A lot of kubernetes certificates, here simple arrangement, plus diagrams, convenient for everyone to learn.
The central public key ca.pem and private key ca-key.pem. All subsequent certificates are signed by CA and used by different components of K8s:
Etcd: use ca.pem, etcd.pem, etc-key.pem.
Kube-apiserver: use ca.pem, kubernetes-key.pem, kubernetes.pem, admin.pem.
Kubelet: use ca.pem.
Kube-proxy: use ca.pem, kube-proxy-key.pem, kube-proxy.pem.
Kubectl: use ca.pem, admin-key.pem, admin.pem, use admin users.
Kube-controller-manager: use ca-key.pem, ca.pem.
Schedule: use apiserver's-- insecure port for communication without certificate configuration.
If there are any omissions and need to supplement, please leave a message for feedback!
