📝 使用 openssl 生成 k8s 新证书（未完成）：k8s 配置文件说明

https://jihulab.com/xuxiaowei-com-cn/gitlab-k8s/-/issues/7
https://jihulab.com/xuxiaowei-com-cn/gitlab-k8s/-/issues/8

k8s/ca-openssl.md

@@ -5,34 +5,34 @@
 1. 不推荐使用此方式，此方式要求对 `openssl` 命令比较了解
 2. 不推荐使用此方式，此方式要求对 k8s 配置文件比较了解
 3. 此方式仅用学习 `openssl` 相关命
-4. ca 原始文件
+4. k8s ca 原始文件、k8s 配置文件
     1. <a target="_blank" href="/k8s/ca/manifests/kube-apiserver.yaml">/etc/kubernetes/manifests/kube-apiserver.yaml</a>
     2. <a target="_blank" href="/k8s/ca/manifests/kube-controller-manager.yaml">
        /etc/kubernetes/manifests/kube-controller-manager.yaml</a>
     3. <a target="_blank" href="/k8s/ca/manifests/kube-scheduler.yaml">/etc/kubernetes/manifests/kube-scheduler.yaml</a>
     4. <a target="_blank" href="/k8s/ca/manifests/etcd.yaml">/etc/kubernetes/manifests/etcd.yaml</a>
-    5. <a target="_blank" href="/k8s/ca/pki/ca.key">/etc/kubernetes/pki/ca.key</a>
-    6. <a target="_blank" href="/k8s/ca/pki/ca.crt">/etc/kubernetes/pki/ca.crt</a>
-    7. <a target="_blank" href="/k8s/ca/pki/apiserver.key">/etc/kubernetes/pki/apiserver.key</a>
-    8. <a target="_blank" href="/k8s/ca/pki/apiserver.crt">/etc/kubernetes/pki/apiserver.crt</a>
-    9. <a target="_blank" href="/k8s/ca/pki/apiserver-kubelet-client.key">
-       /etc/kubernetes/pki/apiserver-kubelet-client.key</a>
-    10. <a target="_blank" href="/k8s/ca/pki/apiserver-kubelet-client.crt">
-        /etc/kubernetes/pki/apiserver-kubelet-client.crt</a>
-    11. <a target="_blank" href="/k8s/ca/pki/front-proxy-ca.key">/etc/kubernetes/pki/front-proxy-ca.key</a>
-    12. <a target="_blank" href="/k8s/ca/pki/front-proxy-ca.crt">/etc/kubernetes/pki/front-proxy-ca.crt</a>
-    13. <a target="_blank" href="/k8s/ca/pki/front-proxy-client.key">/etc/kubernetes/pki/front-proxy-client.key</a>
-    14. <a target="_blank" href="/k8s/ca/pki/front-proxy-client.crt">/etc/kubernetes/pki/front-proxy-client.crt</a>
-    15. <a target="_blank" href="/k8s/ca/pki/etcd/ca.key">/etc/kubernetes/pki/etcd/ca.key</a>
-    16. <a target="_blank" href="/k8s/ca/pki/etcd/ca.crt">/etc/kubernetes/pki/etcd/ca.crt</a>
-    17. <a target="_blank" href="/k8s/ca/pki/etcd/server.key">/etc/kubernetes/pki/etcd/server.key</a>
-    18. <a target="_blank" href="/k8s/ca/pki/etcd/server.crt">/etc/kubernetes/pki/etcd/server.crt</a>
-    19. <a target="_blank" href="/k8s/ca/pki/etcd/peer.key">/etc/kubernetes/pki/etcd/peer.key</a>
-    20. <a target="_blank" href="/k8s/ca/pki/etcd/peer.crt">/etc/kubernetes/pki/etcd/peer.crt</a>
-    21. <a target="_blank" href="/k8s/ca/pki/etcd/healthcheck-client.key">
+    5. <a target="_blank" href="/k8s/ca/pki/etcd/ca.key">/etc/kubernetes/pki/etcd/ca.key</a>
+    6. <a target="_blank" href="/k8s/ca/pki/etcd/ca.crt">/etc/kubernetes/pki/etcd/ca.crt</a>
+    7. <a target="_blank" href="/k8s/ca/pki/etcd/server.key">/etc/kubernetes/pki/etcd/server.key</a>
+    8. <a target="_blank" href="/k8s/ca/pki/etcd/server.crt">/etc/kubernetes/pki/etcd/server.crt</a>
+    9. <a target="_blank" href="/k8s/ca/pki/etcd/peer.key">/etc/kubernetes/pki/etcd/peer.key</a>
+    10. <a target="_blank" href="/k8s/ca/pki/etcd/peer.crt">/etc/kubernetes/pki/etcd/peer.crt</a>
+    11. <a target="_blank" href="/k8s/ca/pki/etcd/healthcheck-client.key">
         /etc/kubernetes/pki/etcd/healthcheck-client.key</a>
-    22. <a target="_blank" href="/k8s/ca/pki/etcd/healthcheck-client.crt">
+    12. <a target="_blank" href="/k8s/ca/pki/etcd/healthcheck-client.crt">
         /etc/kubernetes/pki/etcd/healthcheck-client.crt</a>
+    13. <a target="_blank" href="/k8s/ca/pki/ca.key">/etc/kubernetes/pki/ca.key</a>
+    14. <a target="_blank" href="/k8s/ca/pki/ca.crt">/etc/kubernetes/pki/ca.crt</a>
+    15. <a target="_blank" href="/k8s/ca/pki/apiserver.key">/etc/kubernetes/pki/apiserver.key</a>
+    16. <a target="_blank" href="/k8s/ca/pki/apiserver.crt">/etc/kubernetes/pki/apiserver.crt</a>
+    17. <a target="_blank" href="/k8s/ca/pki/apiserver-kubelet-client.key">
+        /etc/kubernetes/pki/apiserver-kubelet-client.key</a>
+    18. <a target="_blank" href="/k8s/ca/pki/apiserver-kubelet-client.crt">
+        /etc/kubernetes/pki/apiserver-kubelet-client.crt</a>
+    19. <a target="_blank" href="/k8s/ca/pki/front-proxy-ca.key">/etc/kubernetes/pki/front-proxy-ca.key</a>
+    20. <a target="_blank" href="/k8s/ca/pki/front-proxy-ca.crt">/etc/kubernetes/pki/front-proxy-ca.crt</a>
+    21. <a target="_blank" href="/k8s/ca/pki/front-proxy-client.key">/etc/kubernetes/pki/front-proxy-client.key</a>
+    22. <a target="_blank" href="/k8s/ca/pki/front-proxy-client.crt">/etc/kubernetes/pki/front-proxy-client.crt</a>
     23. <a target="_blank" href="/k8s/ca/pki/apiserver-etcd-client.key">
         /etc/kubernetes/pki/apiserver-etcd-client.key</a>
     24. <a target="_blank" href="/k8s/ca/pki/apiserver-etcd-client.crt">
@@ -43,6 +43,35 @@
     28. <a target="_blank" href="/k8s/ca/kubelet.conf">/etc/kubernetes/kubelet.conf</a>
     29. <a target="_blank" href="/k8s/ca/controller-manager.conf">/etc/kubernetes/controller-manager.conf</a>
     30. <a target="_blank" href="/k8s/ca/scheduler.conf">/etc/kubernetes/scheduler.conf</a>
+5. k8s 配置文件说明
+    1. <a target="_blank" href="/k8s/ca/admin.conf">/etc/kubernetes/admin.conf</a>
+        - clusters.cluster.certificate-authority-data
+            1. <a target="_blank" href="/k8s/ca/pki/ca.crt">/etc/kubernetes/pki/ca.crt</a> 文件内容计算 Base64 可得
+        - users.user.client-certificate-data
+            1. 颁发者 CN：kubernetes
+            2. 颁发给、使用者 CN：kubernetes-admin
+            3. O：system:masters
+        - users.user.client-key-data
+            1. users.user.client-certificate-data 的秘钥
+    2. <a target="_blank" href="/k8s/ca/kubelet.conf">/etc/kubernetes/kubelet.conf</a>
+        - clusters.cluster.certificate-authority-data
+            1. <a target="_blank" href="/k8s/ca/pki/ca.crt">/etc/kubernetes/pki/ca.crt</a> 文件内容计算 Base64 可得
+        - users.user.client-certificate-data
+            1. 颁发者 CN：kubernetes
+            2. 颁发给、使用者 CN：system:kube-controller-manager
+        - users.user.client-key-data
+            1. users.user.client-certificate-data 的秘钥
+    3. <a target="_blank" href="/k8s/ca/controller-manager.conf">/etc/kubernetes/controller-manager.conf</a>
+        - clusters.cluster.certificate-authority-data
+            1. <a target="_blank" href="/k8s/ca/pki/ca.crt">/etc/kubernetes/pki/ca.crt</a> 文件内容计算 Base64 可得
+    4. <a target="_blank" href="/k8s/ca/scheduler.conf">/etc/kubernetes/scheduler.conf</a>
+        - clusters.cluster.certificate-authority-data
+            1. <a target="_blank" href="/k8s/ca/pki/ca.crt">/etc/kubernetes/pki/ca.crt</a> 文件内容计算 Base64 可得
+        - users.user.client-certificate-data
+            1. 颁发者 CN：kubernetes
+            2. 颁发给、使用者 CN：system:kube-scheduler
+        - users.user.client-key-data
+            1. users.user.client-certificate-data 的秘钥
 
 ## 配置
 

k8s/ca/conf/admin/clusters-cluster-certificate-authority-data.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

k8s/ca/conf/admin/users-user-client-certificate-data.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

k8s/ca/conf/admin/users-user-client-key-data.key

+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

k8s/ca/conf/controller-manager/clusters-cluster-certificate-authority-data.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

k8s/ca/conf/controller-manager/users-user-client-certificate-data.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

k8s/ca/conf/controller-manager/users-user-client-key-data.key

+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

k8s/ca/conf/kubelet/clusters-cluster-certificate-authority-data.crt

+-----BEGIN CERTIFICATE-----
+MIIC/jCCAeagAwIBAgIBADANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDEwprdWJl
+cm5ldGVzMB4XDTIzMDYyNjE0MTkxN1oXDTMzMDYyMzE0MTkxN1owFTETMBEGA1UE
+AxMKa3ViZXJuZXRlczCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOpP
+MZEApONSsZxodqm1HMHOXZbGkwRwfZj1WtKk2zMMwrk+bvrauDU5TnycnKEqYpoG
+JUBKjubL3xy42aaI7GY1aqFUMw1lq8XY6lg19xb8Z8EftKyLoYy3BeLbckgRDxzK
+LrWsfQn2jQeZqPE9caVOhxsNpDaUj7/m04EQK4o1d5VzGCN9XNx16HH4msWlLPrr
+ScJexk1/9VzvWNSh3wtd1bVNOGZIh8bSW+mWVc9KJF5SEZ+2VsZIn7k9lySWvChP
+UfMdHg7VhG2vM8f3IJiU3Cc6oOsWOiXHm+Slz5/s7Gx/1f9Veoq5KsOvSIzOMwFq
+TaBKJKkveVJHn2/KOpcCAwEAAaNZMFcwDgYDVR0PAQH/BAQDAgKkMA8GA1UdEwEB
+/wQFMAMBAf8wHQYDVR0OBBYEFK8viCr5teSKzAiIgdLptIpzn/YaMBUGA1UdEQQO
+MAyCCmt1YmVybmV0ZXMwDQYJKoZIhvcNAQELBQADggEBAGj+wdOqXwhz1sx1yQiJ
+t87eq+/qdtiB2tieE9/1ijmADGk9o20EKPf0RAu+8XV3sBZFQuBJbkFSv9y33++j
+kgG/OrmIByM0s3z0ucOy95fkBRJ2CBNGBEnIt0YK40dI3dARPEsJ8pxflbQEC18p
+UUZTmhifXRO1q+BaSJUhkKbq4cPvUOCY2kuviDen7QBYKgwJP2lSckhei7ZNSa6T
+NbyVI6HG4kOFD4KUlSQZ6tLJcFJa26HQq7I/8DIWDisRGFd3iYGWuVc0SeqrmUWX
+WlaR1KsoDj437rG2NkHE4M/431WPejz7wGJxm3P4XOz0DSN9IyiSdaRxW46zxll3
+iT8=
+-----END CERTIFICATE-----

k8s/ca/conf/scheduler/clusters-cluster-certificate-authority-data.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

k8s/ca/conf/scheduler/users-user-client-certificate-data.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

k8s/ca/conf/scheduler/users-user-client-key-data.key

+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----