CA
| Keys |
|---|
| ca-key.pem, ca.pem |
Servers
| Component | Node | Keys | hosts |
|---|---|---|---|
| kube-apiserver | master | apiserver-key.pem, apiserver.pem | hostname, Host_IP, advertise_IP, kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc.cluster, kubernetes.default.svc.cluster.local |
| etcd | master | etcdserver-key.pem, etcdserver.pem | |
| kubelet | worker | kubelet-key.pem, kubelet.pem |
Clients
| Component | Node | Keys | CN | O | Server |
|---|---|---|---|---|---|
| kubectl | remote | admin-key.pem, admin.pem | admin | system:masters | kube-apiserver |
| kube-scheduler | master | scheduler-key.pem, scheduler.pem | system:kube-scheduler | kube-apiserver | |
| kube-controller | master | controller-key.pem, controller.pem | system:kube-controller-manager | kube-apiserver | |
| kube-apiserver | master | apiserver-etcd-key.pem, apiserver-etcd.pem | etcd | ||
| kube-apiserver | master | apiserver-kubelet-key.pem, apiserver-kubelet.pem | kubelet | ||
| kube-proxy | worker | proxy-key.pem, proxy.pem | kube-apiserver | ||
| kubelet | worker | kubelet-apiserver-key.pem, kubelet-apiserver.pem | system:node:nodeName | system:nodes | kube-apiserver |