[kubernetes-users] Re: kubernetes HA cluster and ELB certificate mismatch

2018-02-22 Thread achuthman
On Thursday, 22 February 2018 21:20:25 UTC+5:30, Achuth Sankar  wrote:
> I have created a HA cluster with 3 managers as per this documentation:
> https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/
> 
> All steps where done, including the load balancer configuration. Since I have 
> deployed masters as 3 ec2 instances, I used ELB loadbalancers.
> 
> And hence in my kube.conf, server is mentioned as ELB url.
> 
> Now when I look at the journalctl -xe, I am seeing an error mentioning cert 
> is signed by an unknown user.
> 
> My ELB cert is a self signed cert, so my question is there any way to add 
> this cert into the kubernetes trusted store.
> 
> Kube version is 1.9.3.
> 
> 
> regards
> Achuth

At present ELB is configures like this:

[ELB:443]--->[KubeNodes:6443]

-- 
You received this message because you are subscribed to the Google Groups 
"Kubernetes user discussion and Q" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.


[kubernetes-users] kubernetes HA cluster and ELB certificate mismatch

2018-02-22 Thread achuthman

I have created a HA cluster with 3 managers as per this documentation:
https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/

All steps where done, including the load balancer configuration. Since I have 
deployed masters as 3 ec2 instances, I used ELB loadbalancers.

And hence in my kube.conf, server is mentioned as ELB url.

Now when I look at the journalctl -xe, I am seeing an error mentioning cert is 
signed by an unknown user.

My ELB cert is a self signed cert, so my question is there any way to add this 
cert into the kubernetes trusted store.

Kube version is 1.9.3.


regards
Achuth

-- 
You received this message because you are subscribed to the Google Groups 
"Kubernetes user discussion and Q" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to kubernetes-users+unsubscr...@googlegroups.com.
To post to this group, send email to kubernetes-users@googlegroups.com.
Visit this group at https://groups.google.com/group/kubernetes-users.
For more options, visit https://groups.google.com/d/optout.