Section 7: Security (9)

Type the full command to create the private key for the CA.

1. 1. Key Name: ca.key

2. 2. Lenght: 2048

Type the full command to create the private key for the "node01" to talk with the Kubelet service.

1. 1. Key Name: node01.key

2. 2. Lenght: 2048

Type the full command to create the private key for the "Kube API Server".

1. 1. Key Name: apiserver.key

2. 2. Lenght: 2048

Type the full command to create the private key for the ETCD Server.

1. 1. Key Name: etcdserver.key

2. 2. Lenght: 2048

Type the full command to create the private key for the "admin" user.

1. 1. Key Name: admin.key

2. 2. Lenght: 2048

Type the full command to create the private key for the "kube-scheduler":

1. 1. Key Name: scheduler.key

2. 2. Lenght: 2048

Type the full command to create a Certificate Signing Request (CSR) for the private key of the CA.

1. 1. Private Key Name: ca.key

2. 2. CN: KUBERNETES-CA

3. 3. CSR Name: ca.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the ETCD Server.

1. 1. Private Key Name: etcdserver.key

2. 2. CN: etcd-server

3. 3. Administrative group: system:etcd-server

4. 4. CSR Name: etcdserver.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "node01" to talk with the kubelet service:

1. 1. Private Key Name: node01.key

2. 2. CN: node01

3. 3. Administrative group: system:node01

4. 4. CSR Name: node01.csr

Type the full command to create a Certificate Signing Request (CSR) for the private key of the "Kube API Server".

1. 1. Private Key Name: apiserver.key

2. 2. CN: kube-apiserver

3. 3. CSR Name: apiserver.csr

4. 4. Openssl file: openssl.cnf