Skip to content

Commit

Permalink
Update encryption-provider.md
Browse files Browse the repository at this point in the history
  • Loading branch information
zealvora authored Jul 3, 2022
1 parent 4b53216 commit 9cec6e9
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions domain-1-cluster-setup/encryption-provider.md
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
##### Step 1: Create a new secret
```sh
kubectl create secret generic new-secret -n default --from-literal=user=secretpassword --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl create secret generic new-secret -n default --from-literal=user=secretpassword --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```
```sh
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```

##### Step 2: Find the Secret in ETCD in Plain-Text
Expand Down Expand Up @@ -58,10 +58,10 @@ systemctl status kube-apiserver
```
#### Step 7 - Create a new Secret
```sh
kubectl create secret generic new-secret -n default --from-literal=dbadmin=dbpasswd --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl create secret generic new-secret -n default --from-literal=dbadmin=dbpasswd --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```
```sh
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```
##### Step 8: Verify if you can find secret

Expand Down

0 comments on commit 9cec6e9

Please sign in to comment.