kubernetes: CA file when deploying via kops
问题 I have created a cluster on aws using kops . However I am unable to find the file used as/by the certificate authority for spawning off client certs. Does kops create such a thing by default? If so, what is the recommended process for creating client certs? The kops documentation is not very clear about this. 回答1: I've done it like this in the past: Download the kops -generated CA certificate and signing key from S3: s3://<BUCKET_NAME>/<CLUSTER_NAME>/pki/private/ca/*.key s3://<BUCKET_NAME>/