From 1e2fd3cad8fa5c36c3daf15fafd04663754ed774 Mon Sep 17 00:00:00 2001 From: maxgio92 Date: Tue, 11 Oct 2022 16:37:51 +0200 Subject: [PATCH] docs(setup-konnectivity.md): remove duplicate openssl option This cleans up the command to generate the certificate signin request for the Konnectivity server, by removing a duplicated openssl CLI option for the output file. Signed-off-by: Massimiliano Giovagnoli me@maxgio.it --- content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md b/content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md index 6f5e1d18830bb..5402a4048a45e 100644 --- a/content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md +++ b/content/en/docs/tasks/extend-kubernetes/setup-konnectivity.md @@ -54,7 +54,7 @@ For example, you can use the OpenSSL command line tool to issue a X.509 certific using the cluster CA certificate `/etc/kubernetes/pki/ca.crt` from a control-plane host. ```bash -openssl req -subj "/CN=system:konnectivity-server" -new -newkey rsa:2048 -nodes -out konnectivity.csr -keyout konnectivity.key -out konnectivity.csr +openssl req -subj "/CN=system:konnectivity-server" -new -newkey rsa:2048 -nodes -out konnectivity.csr -keyout konnectivity.key openssl x509 -req -in konnectivity.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out konnectivity.crt -days 375 -sha256 SERVER=$(kubectl config view -o jsonpath='{.clusters..server}') kubectl --kubeconfig /etc/kubernetes/konnectivity-server.conf config set-credentials system:konnectivity-server --client-certificate konnectivity.crt --client-key konnectivity.key --embed-certs=true