Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
  • Loading branch information
zealvora committed Jul 3, 2022
2 parents 17b5238 + 9cec6e9 commit ab45aa3
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions domain-1-cluster-setup/encryption-provider.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,10 @@ https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/

##### Step 1: Create a new secret
```sh
kubectl create secret generic new-secret -n default --from-literal=user=secretpassword --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl create secret generic new-secret -n default --from-literal=user=secretpassword --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```
```sh
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```

##### Step 2: Find the Secret in ETCD in Plain-Text
Expand Down Expand Up @@ -62,12 +62,12 @@ systemctl status kube-apiserver
```
#### Step 7 - Create a new Secret
```sh
kubectl create secret generic db-secret -n default --from-literal=dbadmin=dbpasswd --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl create secret generic db-secret -n default --from-literal=dbadmin=dbpasswd --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```
```sh
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/alice.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/alice.key
kubectl get secret --server=https://127.0.0.1:6443 --client-certificate /root/certificates/bob.crt --certificate-authority /root/certificates/ca.crt --client-key /root/certificates/bob.key
```
##### Step 8: Verify if you can find secret
##### Step 8: Verify if you can find secret

```sh
cd /root/certificates
Expand Down

0 comments on commit ab45aa3

Please sign in to comment.