Miroslav Karanovic:
Hi all,
I am a new member here, I want to greet all kubernetes experts and all members of this community.
I am from Bosnia and Herzegovina.
I have been studying this course for some time.
I am currently installing kubeadm.
Chapter>Provisioning a CA and Generating TLS Certificates.
But when installing the openssl.cnf command, I get that the command was not found?
Something is wrong?
Please, help…
[email protected]:~ openssl.cnf <<EOF
> [req]
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = kubernetes
DNS.2 = kubernetes.default
DNS.3 = kubernetes.default.svc
> req_extensions = v3_req
> distinguished_name = req_distinguished_name
> [req_distinguished_name]
> [ v3_req ]
> basicConstraints = CA:FALSE
> keyUsage = nonRepudiation, digitalSignature, keyEncipherment
> subjectAltName = @alt_names
> [alt_names]
> DNS.1 = kubernetes
> DNS.2 = kubernetes.default
> DNS.3 = kubernetes.default.svc
> DNS.4 = kubernetes.default.svc.cluster.local
> IP.1 = 10.96.0.1
> IP.2 = 192.168.5.11
> IP.3 = 192.168.5.12
> IP.4 = 192.168.5.30
> IP.5 = 127.0.0.1
> EOF
openssl.cnf: *command not found*
[email protected]:~
What I to do?
George Lazaroff:
cat <<EOF > openssl.cnf
[req]
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = kubernetes
DNS.2 = kubernetes.default
DNS.3 = kubernetes.default.svc
req_extensions = v3_req
distinguished_name = req_distinguished_name
[req_distinguished_name]
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = kubernetes
DNS.2 = kubernetes.default
DNS.3 = kubernetes.default.svc
DNS.4 = kubernetes.default.svc.cluster.local
IP.1 = 10.96.0.1
IP.2 = 192.168.5.11
IP.3 = 192.168.5.12
IP.4 = 192.168.5.30
IP.5 = 127.0.0.1
EOF
George Lazaroff:
@Miroslav Karanovic just copy and paste the above ^^
Miroslav Karanovic:
Hi friend, thank you a lot, this worked, I forgot command cat. Many thanks. 
Miroslav Karanovic:
for instance in master-2; do
scp ca.crt ca.key kube-apiserver.key kube-apiserver.crt
service-account.key service-account.crt
etcd-server.key etcd-server.crt
${instance}:~/
done
I again have problem with this command?
What I to do?
Last login: Tue Feb 2 19:22:03 2021 from 192.168.5.1
[email protected]:~ for instance in master-1 master-2; do
> scp ca.crt ca.key kube-apiserver.key kube-apiserver.crt \
> service-account.key service-account.crt \
> etcd-server.key etcd-server.crt \
> {instance}:~/
> done
[email protected]: Permission denied (publickey).
lost connection
ca.crt 100% 1001 510.4KB/s 00:00
ca.key 100% 1675 845.5KB/s 00:00
kube-apiserver.key 100% 1679 801.0KB/s 00:00
kube-apiserver.crt 100% 1237 695.6KB/s 00:00
service-account.key 100% 1679 944.0KB/s 00:00
service-account.crt 100% 1005 620.7KB/s 00:00
etcd-server.key 100% 1679 1.1MB/s 00:00
etcd-server.crt: No such file or directory
[email protected]:~$