How PKI works ?

[kuizhiqing]

How the following scenarios works ?

• ssh to sshd
• kubectl to kube-api, kube-api to etcd
• curl to https site

[kuizhiqing]

References

• https://kubernetes.io/docs/tasks/administer-cluster/certificates/
• https://cluster-api.sigs.k8s.io/tasks/certs/generate-kubeconfig
• https://containers.goffinet.org/kubernetes-the-hard-way/docs/05-kubernetes-configuration-files
• https://en.wikipedia.org/wiki/Public_key_infrastructure
• https://kubernetes.io/docs/setup/best-practices/certificates/
• https://github.com/coreos/docs/blob/master/os/generate-self-signed-certificates.md
• https://etcd.io/docs/v3.2/op-guide/security/