Skip to content

Commit

Permalink
Merge pull request #47207 from my-git9/pp-2653
Browse files Browse the repository at this point in the history
[zh-cn] sync kubeadm/kubeadm-init.md
  • Loading branch information
k8s-ci-robot committed Jul 25, 2024
2 parents c149f75 + 3f3c554 commit c2ab45a
Showing 1 changed file with 5 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -341,12 +341,16 @@ as a learner and promoted to a voting member only after the etcd data are fully
`PublicKeysECDSA`
: Can be used to create a cluster that uses ECDSA certificates instead of the default RSA algorithm.
Renewal of existing ECDSA certificates is also supported using `kubeadm certs renew`, but you cannot
switch between the RSA and ECDSA algorithms on the fly or during upgrades.
switch between the RSA and ECDSA algorithms on the fly or during upgrades. Kubernetes
{{< skew currentVersion >}} has a bug where keys in generated kubeconfig files are set use RSA
despite the feature gate being enabled.
-->
`PublicKeysECDSA`
: 可用于创建集群时使用 ECDSA 证书而不是默认 RSA 算法。
支持用 `kubeadm certs renew` 更新现有 ECDSA 证书,
但你不能在集群运行期间或升级期间切换 RSA 和 ECDSA 算法。
Kubernetes {{< skew currentVersion >}} 有一个错误,尽管开启了特性门控,
所生成的 kubeconfig 文件中的密钥仍使用 RSA 设置。

<!--
`RootlessControlPlane`
Expand Down

0 comments on commit c2ab45a

Please sign in to comment.