atomic-site icon indicating copy to clipboard operation
atomic-site copied to clipboard

Fedora Atomic Kubernetes install steps, missing internal SSL IP

Open kallisti5 opened this issue 6 years ago • 0 comments

http://www.projectatomic.io/docs/gettingstarted/

There is an IP missing in the EasySSL steps. In addition to the MASTER_IP, you need to add 10.254.0.1 to the list to ensure applications run in containers (such as the Kubernetes dashboard) can access the API Server.

./easyrsa --subject-alt-name="IP:${MASTER_IP}" build-server-full server nopass

should be:

./easyrsa --subject-alt-name="IP:${MASTER_IP},IP:10.254.0.1" build-server-full server nopass

That change results in the ability to deploy the Kubernetes dashboard via: kubectl create -f https://git.io/kube-dashboard

Without this change, you get complaints from Kubernetes dashboard about "server certificate only for (MASTER_IP here)

kallisti5 avatar Sep 11 '17 02:09 kallisti5