Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[doc] 4.10.7.2 Renewing Certificates Created -> why /etc/kubernetes/pki.bak ? #840

Closed
Martin-Weiss opened this issue May 26, 2020 · 1 comment · Fixed by #848
Closed
Assignees
Milestone

Comments

@Martin-Weiss
Copy link
Contributor

4.10.7.2 Renewing Certificates Created by skuba:

https://susedoc.github.io/doc-caasp/master/single-html/caasp-admin/#_renewing_certificates_created_by_skuba


For this process I would recommend to use the skuba cluster directory on the admin node and not /etc/kubernetes/pki.bak

--> /etc/kubernetes/pki.bak does not exist on the admin node and would also not be writeable as non-root user.

So can we change the paths, here?

@jenting jenting self-assigned this May 27, 2020
@jenting
Copy link

jenting commented May 27, 2020

Because we based on the assumption that the admin login into one of the control plane nodes, so we suggest backup the certificate in /etc/kubernetes/pki.bak.

And yes, we could change to back up the certificates in the admin node.

@r0ckarong r0ckarong added this to the Sprint 31 milestone Jun 8, 2020
@cclhsu cclhsu added the 5.0 label Jun 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants