Commits on Apr 24, 2019

1. data/bootstrap: update etcd-signer-server to use certs for api and ap… …

   …i-int
   
   Requires etcd-signer-server to support multiple certs for serving [1]
   
   Currently the etcd-signer-server only serves request using `api-int` serving certificate which causes errors like,
   
   ```console
   time="2019-04-24T13:25:11-07:00" level=debug msg="Still waiting for the Kubernetes API: Get https://api.adahiya-0.tt.testing:6443/version?timeout=32s: x509: certificate is valid for api-int.adahiya-0.tt.testing, not api.adahiya-0.tt.testing"
   ```
   
   as the installer is hitting the etcd-signer-server on api.$cluster_domain.
   
   Setting up etcd-signer-server to use multiple certs ie one for api and another for api-int allows both internal and external client to hot etcd-signer-server and not get x509 errors.
   
   [1]: coreos/kubecsr#28

   

   abhinavdahiya committed Apr 24, 2019
   Configuration menu

   • View commit details
   • Copy full SHA for 5ff1ae2
   • Browse repository at this point

   Copy the full SHA

   5ff1ae2 View commit details

   Browse the repository at this point in the history