News for hackers. Stuff that matters.

A comment on Kubernetes Failure Stories. Parent comment

Re:Kubernetes Failure Stories by jayd16 on Wednesday June 12, 2019 @02:15PM (#20167614)
I think he's implying a whitelisted set of self signed certs, not "trust any cert".
[ Parent | on HN ]
Re:Kubernetes Failure Stories by barbecue_sauce on Wednesday June 12, 2019 @03:31PM (#20168384)
I think more likely he's implying using a private certificate authority.
[ Parent | on HN ]
Re:Kubernetes Failure Stories by clhodapp on Wednesday June 12, 2019 @03:09PM (#20168200)
Unfortunately, Kubernetes does not support that mode of operation.
[ Parent | on HN ]
Re:Kubernetes Failure Stories by krferriter on Wednesday June 12, 2019 @07:30PM (#20170415)
You can create your own CA cert and put it in the root store on each instance. This can be incorporated into the provisioning and deployment pipeline for creating the nodes.
[ Parent | on HN ]
Re:Kubernetes Failure Stories by clhodapp on Wednesday June 12, 2019 @07:33PM (#20170431)
Definitely! That is how you are supposed to do it! That is a private CA, not self-signed certs, though.
[ Parent | on HN ]