二进制部署k8s集群：部署kubelet

Posted 2020-12-14 yyee

签发kubelet证书

前面安装kube-apiserver的时候已经签发过证书，在前面签发证书的基础上签发kubelet证书，与前面签发的证书共用cat私钥文件与根配置文件ca-config.json 。

切换到192.168.0.102虚拟机。

vi /opt/certs/kubelet-csr.json

kubelet-csr.json 文件内容：

{
  "CN": "k8s-kubelet",
  "hosts": [
    "127.0.0.1",
    "192.168.0.51",
    "192.168.0.52",
    "192.168.0.53",
    "192.168.0.54",
    "192.168.0.55",
    "192.168.0.56",
    "192.168.0.57",
    "192.168.0.58",
    "192.168.0.59",
    "192.168.0.60",
    "192.168.0.101",
    "192.168.0.102",
    "192.168.0.103",
    "192.168.0.104",
    "192.168.0.105",
    "192.168.0.106",
    "192.168.0.107",
    "192.168.0.108",
    "192.168.0.109",
    "192.168.0.110",
    "192.168.0.161",
    "192.168.0.162",
    "192.168.0.163",
    "192.168.0.164",
    "192.168.0.165",
    "192.168.0.166",
    "192.168.0.167",
    "192.168.0.168",
    "192.168.0.169",
    "192.168.0.170"
  ],
  "key": {
    "algo": "rsa",
    "size": 2048
  },
  "names": [
    {
      "C": "CN",
      "ST": "Beijing",
      "L": "Beijing",
      "O": "k8s",
      "OU": "system"
    }
  ]
}