Skip to content

Commit 580f413

Browse files
libinglonggjmzj
authored andcommitted
Update 01-CA_and_prerequisite.md
fix json格式错误
1 parent a9fc0d0 commit 580f413

File tree

1 file changed

+23
-25
lines changed

1 file changed

+23
-25
lines changed

docs/setup/01-CA_and_prerequisite.md

+23-25
Original file line numberDiff line numberDiff line change
@@ -27,32 +27,30 @@ kubernetes 系统各组件需要使用 TLS 证书对通信进行加密,使用
2727
#### 创建 CA 配置文件 [ca-config.json.j2](../../roles/deploy/templates/ca-config.json.j2)
2828
``` bash
2929
{
30-
"signing": {
31-
"default": {
32-
"expiry": "{{ CERT_EXPIRY }}"
33-
},
34-
"profiles": {
35-
"kubernetes": {
36-
"usages": [
37-
"signing",
38-
"key encipherment",
39-
"server auth",
40-
"client auth"
41-
],
42-
"expiry": "{{ CERT_EXPIRY }}"
43-
}
44-
},
45-
"profiles": {
46-
"kcfg": {
47-
"usages": [
48-
"signing",
49-
"key encipherment",
50-
"client auth"
51-
],
52-
"expiry": "{{ CUSTOM_EXPIRY }}"
53-
}
30+
"signing":{
31+
"default":{
32+
"expiry":"{{ CERT_EXPIRY }}"
33+
},
34+
"profiles":{
35+
"kubernetes":{
36+
"usages":[
37+
"signing",
38+
"key encipherment",
39+
"server auth",
40+
"client auth"
41+
],
42+
"expiry":"{{ CERT_EXPIRY }}"
43+
},
44+
"kcfg":{
45+
"usages":[
46+
"signing",
47+
"key encipherment",
48+
"client auth"
49+
],
50+
"expiry":"{{ CUSTOM_EXPIRY }}"
51+
}
52+
}
5453
}
55-
}
5654
}
5755
```
5856
+ `signing`:表示该证书可用于签名其它证书;生成的 ca.pem 证书中 `CA=TRUE`

0 commit comments

Comments
 (0)