Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- root@kq-lsfjskcynbdkxkkhuiizcvhafa-0:~# ls /etc/ssl/etcd/ssl/
- admin-kq-lsfjskcynbdkxkkhuiizcvhafa-0-key.pem member-kq-lsfjskcynbdkxkkhuiizcvhafa-1.pem
- admin-kq-lsfjskcynbdkxkkhuiizcvhafa-0.pem member-kq-lsfjskcynbdkxkkhuiizcvhafa-2-key.pem
- admin-kq-lsfjskcynbdkxkkhuiizcvhafa-1-key.pem member-kq-lsfjskcynbdkxkkhuiizcvhafa-2.pem
- admin-kq-lsfjskcynbdkxkkhuiizcvhafa-1.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-0-key.pem
- admin-kq-lsfjskcynbdkxkkhuiizcvhafa-2-key.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-0-npt7nbyt43vwtwbe-key.pem
- admin-kq-lsfjskcynbdkxkkhuiizcvhafa-2.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-0-npt7nbyt43vwtwbe.pem
- ca-key.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-0.pem
- ca.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-1-key.pem
- member-kq-lsfjskcynbdkxkkhuiizcvhafa-0-key.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-1.pem
- member-kq-lsfjskcynbdkxkkhuiizcvhafa-0.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-2-key.pem
- member-kq-lsfjskcynbdkxkkhuiizcvhafa-1-key.pem node-kq-lsfjskcynbdkxkkhuiizcvhafa-2.pem
- root@kq-lsfjskcynbdkxkkhuiizcvhafa-0:~# cat /etc/etcd.env
- ETCD_DATA_DIR=/var/lib/etcd
- ETCD_ADVERTISE_CLIENT_URLS=https://172.17.48.99:2379
- ETCD_INITIAL_ADVERTISE_PEER_URLS=https://172.17.48.99:2380
- ETCD_INITIAL_CLUSTER_STATE=existing
- ETCD_METRICS=basic
- ETCD_LISTEN_CLIENT_URLS=https://10.1.0.3:2379,https://127.0.0.1:2379
- ETCD_ELECTION_TIMEOUT=5000
- ETCD_HEARTBEAT_INTERVAL=250
- ETCD_INITIAL_CLUSTER_TOKEN=k8s_etcd
- ETCD_LISTEN_PEER_URLS=https://10.1.0.3:2380
- ETCD_NAME=etcd1
- ETCD_PROXY=off
- ETCD_INITIAL_CLUSTER=etcd1=https://172.17.48.99:2380,etcd2=https://172.17.48.152:2380,etcd3=https://172.17.48.176:2380
- ETCD_AUTO_COMPACTION_RETENTION=8
- # TLS settings
- ETCD_TRUSTED_CA_FILE=/etc/ssl/etcd/ssl/ca.pem
- ETCD_CERT_FILE=/etc/ssl/etcd/ssl/member-kq-lsfjskcynbdkxkkhuiizcvhafa-0.pem
- ETCD_KEY_FILE=/etc/ssl/etcd/ssl/member-kq-lsfjskcynbdkxkkhuiizcvhafa-0-key.pem
- ETCD_CLIENT_CERT_AUTH=true
- ETCD_PEER_TRUSTED_CA_FILE=/etc/ssl/etcd/ssl/ca.pem
- ETCD_PEER_CERT_FILE=/etc/ssl/etcd/ssl/member-kq-lsfjskcynbdkxkkhuiizcvhafa-0.pem
- ETCD_PEER_KEY_FILE=/etc/ssl/etcd/ssl/member-kq-lsfjskcynbdkxkkhuiizcvhafa-0-key.pem
- ETCD_PEER_CLIENT_CERT_AUTH=True
- root@kq-lsfjskcynbdkxkkhuiizcvhafa-0:~# netstat -tuplen
- Active Internet connections (only servers)
- Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name
- tcp 0 0 127.0.0.1:10248 0.0.0.0:* LISTEN 0 56020 14239/kubelet
- tcp 0 0 127.0.0.1:10249 0.0.0.0:* LISTEN 0 59283 14832/hyperkube
- tcp 0 0 127.0.0.1:2379 0.0.0.0:* LISTEN 0 46971 11338/etcd
- tcp 0 0 10.1.0.3:2379 0.0.0.0:* LISTEN 0 46970 11338/etcd
- tcp 0 0 10.1.0.3:2380 0.0.0.0:* LISTEN 0 46969 11338/etcd
- tcp 0 0 127.0.0.1:8080 0.0.0.0:* LISTEN 0 62181 15156/hyperkube
- tcp 0 0 127.0.0.1:10256 0.0.0.0:* LISTEN 0 59281 14832/hyperkube
- tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 16967 2309/sshd
- tcp6 0 0 :::10250 :::* LISTEN 0 56027 14239/kubelet
- tcp6 0 0 :::10251 :::* LISTEN 0 66965 15984/hyperkube
- tcp6 0 0 :::6443 :::* LISTEN 0 62564 15156/hyperkube
- tcp6 0 0 :::10252 :::* LISTEN 0 66523 16127/hyperkube
- tcp6 0 0 :::22 :::* LISTEN 0 16976 2309/sshd
- root@kq-lsfjskcynbdkxkkhuiizcvhafa-0:~# ls /etc/ssl/etcd/ssl/
- /etc/ssl/etcd/ssl/node-kq-lsfjskcynbdkxkkhuiizcvhafa-0.pem
- Certificate Information:
- Common Name: etcd-node-kq-lsfjskcynbdkxkkhuiizcvhafa-0
- Subject Alternative Names: localhost, kq-lsfjskcynbdkxkkhuiizcvhafa-0, kq-lsfjskcynbdkxkkhuiizcvhafa-1, kq-lsfjskcynbdkxkkhuiizcvhafa-2, lb-apiserver.kubernetes.local, etcd.kube-system.svc.cluster.local, etcd.kube-system.svc, etcd.kube-system, etcd, IP Address:172.17.48.99, IP Address:10.1.0.3, IP Address:172.17.48.152, IP Address:10.1.0.4, IP Address:172.17.48.176, IP Address:10.1.0.5, IP Address:127.0.0.1
- Valid From: August 30, 2018
- Valid To: August 6, 2118
- Serial Number: 11176972671625766364 (0x9b1c956d3c80a5dc)
- SSL Tools
- Popular Pages
- The SSL Certificate Wizard
- The Most Common OpenSSL Commands
- The Most Common Java Keytool Keystore Commands
- Redirect HTTP to HTTPS on Apache
- Redirect HTTP to HTTPS on IIS 7
- Installing an SSL Certificate on Windows
- How to Create A Self Signed Certificate
- How to Move or Copy a Certificate to Another Server
- Quick SSL Search
Advertisement
Add Comment
Please, Sign In to add comment