CozyFexKubernetes TLS Certificates
Contents
Server Certificates
Server Certificates
To serve security connection with client.
Root Certificates
Root Certificates
To sign servers certificates.
It’s called CA(Certificate Authority)
It’s called CA(Certificate Authority)
Client Certificates
Client Certificates
The server request to client verifying themselves.
Name Convention
| Certificate(Public Key) | Private Key | |
|---|---|---|
| Purpose | Encrypt(Lock) | Decrypt |
| Extension Type | *.crt | *.key |
| *.pem | *-key.pem | |
| Examples | server.crt | server.key |
| server.pem | server-key.pem | |
| client.crt | client.key | |
| client.pem | client-key.pem |
Kubernetes Certificates Table
| Service | Public Key | Private Key |
|---|---|---|
| KUBE-API SERVER | apiserver.crt | apiserver.key |
| ETCD SERVER | etcdserver.crt | etcdserver.key |
| KUBELET SERVER | kubelet.crt | kubelet.key |
| KUBE-SCHEDULER | scheduler.crt | scheduler.key |
| KUBE-CONTROLLER-MANAGER | controller-manager.crt | controller-manager.key |
| KUBE-PROXY | kube-proxy.crt | kube-proxy.key |
| Admin | admin.crt | admin.key |
| KUBE-API SERVER -> ETCD SERVER | apiserver-etcd-client.crt | apiserver-etcd-client.key |
| KUBE-API SERVER -> KUBELET SERVER | apiserver-kubelet-client.crt | apiserver-kubelet-client.key |
| KUBELET SERVER –> KUBE-API SERVER | kubelet-client.crt | kubelet-client.key |