openstack/kuryr-kubernetes
Code Issues Proposed changes
Files
e6e91c531e2991a99f7b522486dcaee4c250497f
kuryr-kubernetes/doc/source/installation/https_kubernetes.rst
Roman Dobosz fd440fcdcb Explicitly use code-block. 
In this patch we convert preformatted directive (double colon at the end
of line) to code-block sphinx directive. Also, fixed formatting for
existing code-block directives, and changes restructuredtext code
directive into sphinx code-block.

Change-Id: I9db48fbb169263e3bf66eacca7d9bce6c355739f
2019-11-13 12:49:43 +01:00

853 B
Raw Blame History

Watching Kubernetes api-server over HTTPS

Add absolute path of client side cert file and key file for Kubernetes server in kuryr.conf:

[kubernetes]
api_root = https://your_server_address:server_ssl_port
ssl_client_crt_file = <absolute file path eg. /etc/kubernetes/admin.crt>
ssl_client_key_file = <absolute file path eg. /etc/kubernetes/admin.key>

If server ssl certification verification is also to be enabled, add absolute path to the ca cert:

[kubernetes]
ssl_ca_crt_file = <absolute file path eg. /etc/kubernetes/ca.crt>
ssl_verify_server_crt = True

If want to query HTTPS Kubernetes api server with --insecure mode:

[kubernetes]
ssl_verify_server_crt = False