search

luxas / kubeadm-workshop

Showcasing a bare-metal multi-platform kubeadm setup with persistent storage and monitoring
MIT License
680 stars 190 forks source link

What is `proxy-client-cert-file` good for? #14

Open webwurst opened 7 years ago

webwurst commented 7 years ago

Could you explain or point to some background information why these lines are needed? And what would be their default settings?

  proxy-client-cert-file: "/etc/kubernetes/pki/front-proxy-client.crt"
  proxy-client-key-file: "/etc/kubernetes/pki/front-proxy-client.key"
luxas commented 7 years ago

It's used for API Aggregation: https://github.com/kubernetes/community/blob/master/contributors/design-proposals/aggregated-api-servers.md