running coreos, etcd not secured default. secure can use tls, adds level of complexity i'm willing work on.
now, kubernetes able use tls secured etcd cluster?
in config kubelet , various pods, kubernetes passes etcd endpoints parameters, require etcd , need certificates talk if secured. if kubernetes supports tls connection etcd, how configured?
thanks
digging further , asking on github project, directed towards post hope answers question:
https://groups.google.com/forum/#!topic/google-containers/btfecrq3n28/discussion
in short config file should like:
{ "cluster": { "machines": [ "https://kube-master.internal:2379", "https://kube-minion1.internal:2379", "https://kube-minion2.internal:2379" ] }, "config": { "certfile": "/etc/etcd/kube-master.internal.pem", "keyfile": "/etc/etcd/kube-master.internal.key", "cacertfiles": [ "/etc/etcd/kubecluster-ca.pem" ], "consistency": "strong_consistency" } }
haven't tried yet asap.
Comments
Post a Comment