kubernetes-ovn-heterogeneous-cluster icon indicating copy to clipboard operation
kubernetes-ovn-heterogeneous-cluster copied to clipboard

Linux worker ./make-certs error

Open BrandonPotter opened this issue 7 years ago • 1 comments

In guide https://github.com/apprenda/kubernetes-ovn-heterogeneous-cluster/tree/master/worker

At the ./make-certs step:

./make-certs
Generating RSA private key, 2048 bit long modulus
........................................................+++
.................+++
e is 65537 (0x10001)
Error Loading request extension section v3_req
140432032040600:error:220A4076:X509 V3 routines:a2i_GENERAL_NAME:bad ip address:v3_alt.c:476:value=
140432032040600:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:v3_conf.c:95:name=subjectAltName, value=@alt_names

./make-certs contents:

cat ./make-certs
#!/bin/bash -
set -o errexit
set -o nounset
set -o pipefail
cert_group=kube-cert
cert_dir=/etc/kubernetes/tls
mkdir -p "$cert_dir"
rm -rf "$cert_dir/*"
pem_ca=$cert_dir/ca.pem
pem_ca_key=$cert_dir/ca-key.pem
pem_node=$cert_dir/node.pem
pem_node_key=$cert_dir/node-key.pem
pem_node_csr=$cert_dir/node-csr.pem
# Make sure cert group exists
groupadd -r $cert_group
# Make sure perms are right
chgrp $cert_group $pem_ca $pem_ca_key
chmod 600 $pem_ca_key
chmod 660 $pem_ca
# Generate TLS artifacts
openssl genrsa -out $pem_node_key 2048
openssl req -new -key $pem_node_key -out $pem_node_csr -subj "/CN=sig-windows-worker-linux-1" -config openssl.cnf
openssl x509 -req -in $pem_node_csr -CA $pem_ca -CAkey $pem_ca_key -CAcreateserial -out $pem_node -days 365 -extensions v3_req -extfile openssl.cnf
# Make server certs accessible to apiserver.
chgrp $cert_group $pem_node $pem_node_key
chmod 600 $pem_node_key
chmod 660 $pem_node $pem_ca

What's going wrong here?

BrandonPotter avatar Mar 27 '17 16:03 BrandonPotter

You haven't exported environment variables properly.

pires avatar Mar 27 '17 23:03 pires