Add docs for tls-additional #1981
Conversation
jakefhyde
requested review from
LucasSaintarbor,
btat,
pmkovar and
sunilarjun
as code owners
|
@snasovich does this need anything to unblock? |
btat
added
the
port/community-product
LucasSaintarbor
left a comment
LucasSaintarbor
left a comment
There was a problem hiding this comment.
@jakefhyde Sorry for the late review. Requesting some small changes. May rebase your branch and add these changes to the version docs they apply to i.e. versioned_docs/version-2.12/getting-started/installation-and-upgrade/resources/add-tls-secrets.md, versioned_docs/version-2.11/getting-started/installation-and-upgrade/resources/add-tls-secrets.md, versioned_docs/version-2.10/getting-started/installation-and-upgrade/resources/add-tls-secrets.md, versioned_docs/version-2.9/getting-started/installation-and-upgrade/resources/add-tls-secrets.md. Thanks!
|
|
||
| ## Adding Additional CA Certificates | ||
|
|
||
| If you are using a node driver which makes API requests using a different CA than the one configured for Rancher, additional root certificates and certificate chains can be added. |
There was a problem hiding this comment.
| If you are using a node driver which makes API requests using a different CA than the one configured for Rancher, additional root certificates and certificate chains can be added. | |
| If you are using a node driver that makes API requests with a different CA than the one configured for Rancher, you can add additional root certificates and certificate chains. |
| Create a unique file ending in `.pem` for each certificate that is required, and use kubectl to create the | ||
| `tls-additional` secret in the `cattle-system` namespace. | ||
|
|
||
| ``` |
There was a problem hiding this comment.
| ``` | |
| ```console |
| --from-file=cacerts1.pem=cacerts1.pem --from-file=cacerts2.pem=cacerts2.pem | ||
| ``` | ||
|
|
||
| These CA root certificates and certificate chains will be mounted into the node driver pod during provisioning. |
There was a problem hiding this comment.
| These CA root certificates and certificate chains will be mounted into the node driver pod during provisioning. | |
| Rancher mounts these CA root certificates and certificate chains into the node driver pod during provisioning. |
5 participants
Fixes #1858
Reminders
See the README for more details on how to work with the Rancher docs.
Verify if changes pertain to other versions of Rancher. If they do, finalize the edits on one version of the page, then apply the edits to the other versions.
If the pull request is dependent on an upcoming release, remember to add a "MERGE ON RELEASE" label and set the proper milestone.
Description
documenting how to configure
tls-additional, and what it is used for.Comments
Would love some feedback on this.
SURE-9870