atomic-site
atomic-site copied to clipboard
Fedora Atomic Kubernetes install steps, missing internal SSL IP
http://www.projectatomic.io/docs/gettingstarted/
There is an IP missing in the EasySSL steps. In addition to the MASTER_IP, you need to add 10.254.0.1 to the list to ensure applications run in containers (such as the Kubernetes dashboard) can access the API Server.
./easyrsa --subject-alt-name="IP:${MASTER_IP}" build-server-full server nopass
should be:
./easyrsa --subject-alt-name="IP:${MASTER_IP},IP:10.254.0.1" build-server-full server nopass
That change results in the ability to deploy the Kubernetes dashboard via: kubectl create -f https://git.io/kube-dashboard
Without this change, you get complaints from Kubernetes dashboard about "server certificate only for (MASTER_IP here)