Skip to content

Commit

Permalink
Improve TLS bootstrapping documentation (#341)
Browse files Browse the repository at this point in the history
This commit enhances the clarity of the TLS bootstrapping documentation. 
It enables users to verify the correct configuration in their kube-apiserver.service file, whether they're double-checking their setup or ensuring no steps were missed before proceeding.
  • Loading branch information
0xbochi authored May 16, 2024
1 parent 0d885c9 commit 25a1f2b
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion docs/11-tls-bootstrapping-kubernetes-workers.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,14 @@ So let's get started!

**kube-apiserver** - Ensure bootstrap token based authentication is enabled on the kube-apiserver.

`--enable-bootstrap-token-auth=true`
run this command on `controlplane01` :
```
grep 'enable-bootstrap-token-auth=true' /etc/systemd/system/kube-apiserver.service
```

expected output :

` --enable-bootstrap-token-auth=true \`

**kube-controller-manager** - The certificate requests are signed by the kube-controller-manager ultimately. The kube-controller-manager requires the CA Certificate and Key to perform these operations.

Expand Down

0 comments on commit 25a1f2b

Please sign in to comment.