Kubernetes

Generate the certificate for etcd nodes to communicate with each other

Generate the certificate for etcd nodes to communicate with each other, and save them into etcd/peer.crt and etcd/peer.key files.

Default SANs are localhost, 127.0.0.1, 127.0.0.1, ::1

If both files already exist, kubeadm skips the generation step and existing files will be used.

kubeadm init phase certs etcd-peer [flags]

--cert-dir string Default: "/etc/kubernetes/pki"
	The path where to save and store the certificates.
--config string
	Path to a kubeadm configuration file.
--dry-run
	Don't apply any changes; just output what would be done.
-h, --help
	help for etcd-peer
--kubernetes-version string Default: "stable-1"
	Choose a specific Kubernetes version for the control plane.

--rootfs string
	[EXPERIMENTAL] The path to the 'real' host root filesystem.

Feedback