Skip to content

Commit

Permalink
Merge pull request kubernetes#37271 from maxgio92/patch-2
Browse files Browse the repository at this point in the history
docs(setup-konnectivity.md): remove duplicate openssl option
  • Loading branch information
k8s-ci-robot authored Nov 3, 2022
2 parents 8df4092 + 1e2fd3c commit d3e0880
Showing 1 changed file with 1 addition and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ For example, you can use the OpenSSL command line tool to issue a X.509 certific
using the cluster CA certificate `/etc/kubernetes/pki/ca.crt` from a control-plane host.

```bash
openssl req -subj "/CN=system:konnectivity-server" -new -newkey rsa:2048 -nodes -out konnectivity.csr -keyout konnectivity.key -out konnectivity.csr
openssl req -subj "/CN=system:konnectivity-server" -new -newkey rsa:2048 -nodes -out konnectivity.csr -keyout konnectivity.key
openssl x509 -req -in konnectivity.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out konnectivity.crt -days 375 -sha256
SERVER=$(kubectl config view -o jsonpath='{.clusters..server}')
kubectl --kubeconfig /etc/kubernetes/konnectivity-server.conf config set-credentials system:konnectivity-server --client-certificate konnectivity.crt --client-key konnectivity.key --embed-certs=true
Expand Down

0 comments on commit d3e0880

Please sign in to comment.