-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Refactor prepare etcd #92
Conversation
to deal with both TKS and tacoplay
--from-file=etcd-client-key=/ssl/{{ .Values.etcd.client_keyfile }} | ||
{{- else if eq .Values.deployer "tacoplay" }} | ||
--from-file=etcd-ca=/ssl/{{ .Values.etcd.tacoplay_certfile }} \ | ||
--from-file=etcd-client=/ssl/admin-${MY_NODE_NAME}.pem \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
admin
pem으로 하면 잘되나요?
판교 prd의 Kube-apiserver 파라미터에는 node
를 쓰고 있어요
--etcd-certfile=/etc/ssl/etcd/ssl/node-master02-prd.pem
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
admin
pem으로 하면 잘되나요? 판교 prd의 Kube-apiserver 파라미터에는node
를 쓰고 있어요--etcd-certfile=/etc/ssl/etcd/ssl/node-master02-prd.pem
아, 잘 지적해주셨네요! 안그래도 어제 주관님이 admin 대신 member cert 쓰는게 맞겠다고 의견 주셨거든요. 근데 혹시 member와 node cert의 차이를 아시나요? TKS의 경우에 peer.crt 를 쓰는 걸로 봐서 member 쓰는게 맞는 거 같긴 한데 확실치가 않네요
일단, admin 이나 member 둘 다 해봤는데 잘 동작하고 있습니다.
This PR is stale because it has been open 3 days with no activity. Remove stale label or comment or this will be closed in 3 days. |
This PR was closed because it has been stalled for 10 days with no activity. |
https://github.com/openinfradev/tks-issues/issues/39
내용 설명은 위 링크에 있습니다