• Ed Bartosh's avatar
    kubeadm: add required etcd certs to selfhosting api-server · 7b058c43
    Ed Bartosh authored
    Selfhosting pivoting fails when using --store-certs-in-secrets
    as api-server fails to start because of missing etcd/ca and
    apiserver-etcd-client certificates:
       F1227 16:01:52.237352 1 storage_decorator.go:57] Unable to create storage backend:
       config (&{ /registry [https://127.0.0.1:2379]
                  /etc/kubernetes/pki/apiserver-etcd-client.key
                  /etc/kubernetes/pki/apiserver-etcd-client.crt
                  /etc/kubernetes/pki/etcd/ca.crt true 0xc000884120 <nil> 5m0s 1m0s}),
       err (open /etc/kubernetes/pki/apiserver-etcd-client.crt: no such file or directory)
    
    Added required certificates to fix this.
    
    Secret name for etc/ca certifcate has been converted to conform RFC-1123 subdomain
    naming conventions to prevent this TLS secret creation failure:
        unable to create secret: Secret "etcd/ca" is invalid: metadata.name:
        Invalid value: "etcd/ca": a DNS-1123 subdomain must consist of lower
        case alphanumeric characters, '-' or '.', and must start and end with an
        alphanumeric character (e.g. 'example.com', regex used for validation is
        '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')
    
    Related issue: kubernetes/kubeadm#1281
    7b058c43
Name
Last commit
Last update
.github Loading commit data...
Godeps Loading commit data...
api Loading commit data...
build Loading commit data...
cluster Loading commit data...
cmd Loading commit data...
docs Loading commit data...
hack Loading commit data...
logo Loading commit data...
pkg Loading commit data...
plugin Loading commit data...
staging Loading commit data...
test Loading commit data...
third_party Loading commit data...
translations Loading commit data...
vendor Loading commit data...
.bazelrc Loading commit data...
.generated_files Loading commit data...
.gitattributes Loading commit data...
.gitignore Loading commit data...
.kazelcfg.json Loading commit data...
BUILD.bazel Loading commit data...
CHANGELOG-1.10.md Loading commit data...
CHANGELOG-1.11.md Loading commit data...
CHANGELOG-1.12.md Loading commit data...
CHANGELOG-1.13.md Loading commit data...
CHANGELOG-1.2.md Loading commit data...
CHANGELOG-1.3.md Loading commit data...
CHANGELOG-1.4.md Loading commit data...
CHANGELOG-1.5.md Loading commit data...
CHANGELOG-1.6.md Loading commit data...
CHANGELOG-1.7.md Loading commit data...
CHANGELOG-1.8.md Loading commit data...
CHANGELOG-1.9.md Loading commit data...
CHANGELOG.md Loading commit data...
CONTRIBUTING.md Loading commit data...
LICENSE Loading commit data...
Makefile Loading commit data...
Makefile.generated_files Loading commit data...
OWNERS Loading commit data...
OWNERS_ALIASES Loading commit data...
README.md Loading commit data...
SECURITY_CONTACTS Loading commit data...
SUPPORT.md Loading commit data...
WORKSPACE Loading commit data...
code-of-conduct.md Loading commit data...