๐ก Kubernetes kube-apiserver CA Certificates โ Executive Summary
Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kube-apiserver CA Certificates.
Related documents
Setups
3rdParty Setups
cluster cmd
CNI cmd
gitOps cmd
SubDocs
3rd Party SubDocs
Swagger
Git OpenApi
bash
https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.jsonSSL/PKI path
kubectl describe pods -n kube-system kube-apiserver*
- ?:
/etc/kubernetes/pki/* - k8s-certs:
/etc/kubernetes/ssl/* - etc-pki-tls:
/etc/pki/tls/* - etc-pki-ca-trust:
/etc/pki/ca-trust/* - etc-pki:
/etc/pki/* - ca-certs:
/etc/ssl/certs/*
ca: ca.crtpem if required:
bash
grep client-certificate-data kubeconfig | awk '{ print $2 }' | base64 --decode > client-cert.pem
grep client-key-data kubeconfig | awk '{ print $2 }' | base64 --decode > client-key.pem
grep certificate-authority-data kubeconfig | awk '{ print $2 }' | base64 --decode > cluster-ca-cert.pemConfirm Default ServiceAccount Token
bash
kubectl get secret $(kubectl get sa default -ojsonpath="{.secrets[0].name}") -ojsonpath="{.data.token}" | base64 -d
Leave a Reply