A new developer needs a certificate. Don't copy the CA key around.
You'll learn to
approve a CSR object with kubectl certificate approve
Recap
- 1CertificateSigningRequest: base64 CSR, signer, client auth
- 2kubectl certificate approve (or deny)
- 3The controller manager signs; read status.certificate
Check yourself
Who signs an approved CSR?
6.8
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.