kubectl create secret tls

1 개요[ | ]

kubectl create secret tls

구문

kubectl create secret tls ${CERT_NAME} --key ${KEY_FILE} --cert ${CERT_FILE}

2 실습[ | ]

$ CERT_NAME=tls-example
$ HOST=example.com
$ openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout ${HOST}.key -out ${HOST}.crt -subj "/CN=${HOST}/O=${HOST}"
Generating a 2048 bit RSA private key
..............+++
............................+++
writing new private key to 'example.com.key'
-----

$ kubectl create secret tls ${CERT_NAME} --key ${HOST}.key --cert ${HOST}.crt
secret/tls-example created

$ ll ${HOST}*
-rw-r--r-- 1 root root 1159 May 26 13:50 example.com.crt
-rw-r--r-- 1 root root 1704 May 26 13:50 example.com.key

$ kubectl get secret ${CERT_NAME}
NAME          TYPE                DATA      AGE
tls-example   kubernetes.io/tls   2         28s

$ kubectl get secret ${CERT_NAME} -oyaml
apiVersion: v1
data:
  tls.crt: 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
  tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUV2Z0lCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQktnd2dnU2tBZ0VBQW9JQkFRRE1ROUxqZWRhei9nRmUKY3Fyb3JKSDIxa0Rqb0pCYnNUdVg2Y2VURE1WZGp4cUtvUDhPZjVPMUowMWhhT3hFUkxKN2oxK3lxRDQrQVdScApxZzVvM0Z0ekJqQzg0d3BLOG83U1Awby9pNDlQaW9QOG40K3dhUFR5Z3hzNmFYZzZXWC9tdzUwNUNuM0dKQ29TCmZHdXpOUlh3azJXNmEvWWhWSXg0RjJUMWsyYjJyeGc1bHloblVyQm4rZDJTSzBXZkM0eTg4T3JhOW02djVUV2YKT2hYdGE1MEZqamlyclZablQreXlYR2NtZUtwS3dRMjJZejcwYlU2SjZZOFJOVHZaZFE5OE01L2RjME5RMEs3LwpqSUFvM1J5N3hMdDIrWkJ5TFBTaXZ0TDRzVzNkbWk5TmhFN3o4eUhCVVBRTWRrd1BpeWk5TWJ5SEdxL0l3Q25LCk4yTk9QeWdoQWdNQkFBRUNnZ0VBSFRxdldNRzhpWEVWZlJCbmlIZjVReHNSbWdFRjV6a0xVQWV4K1ViZ2p5ekYKSFlWQU9qRGpVQTdac2RDenpta09LVVF3NjMzTHVrKzBzTElXOGNabWg2VWhJRVpVMkxpdzIwRVhQTlNabzBZcwo4TjljVG1BV2ZRVnB4Z2dGbmtQa1czOHVabFVyL2toNmhMNnRJcTI3Ly9yM21aK05UdU9zWGhycTVZRThRSnc0CkpOL1hGd2VOalVaVGI5dm1xZmlVMXZHY0ZWZWZsZHhkaFdvbFozUjdiWkFEOGltZHZBaWFPdnFtRVpTQ1hzWisKcG91b2RLemx4YkdUbSs3a0ZiTFJEYkg1R05OTjlJUE42alc2OE5ield4b1pBb0dtOGIxNWExOUNtZkQwUENuOQpReDMwTE1JQytRRWplem9FVnFiNHFhZSs3dVRIZEVNMHZ5cWRXdVFoWVFLQmdRRG9rU3FYUDdNQWpGYWVYUVJxCktnRDRhdW9mblVTeTNSQlZQeHBhQUhPZDN1eUVlV1VESGJjRzdlVUF4MGcwUW9xZGVldy9EU2Rrb2p2ejVUaGQKOFplMittSEZud2RRMFphcExTMXdSNjVyRldiS0QxRmZvZ0huT1hraDVUY3Npak5DaDNka3hFMzlIYitNUWFuYwpxY0lvQXpzSWNNcXlUSVhrUWNsVjFvRUFiUUtCZ1FEZzJLSDJkZ0dCd2FkRWY1V0NRRVNKdmVWTWNZT0ZMK3M1CkdZcGtYV0o5TmlidVpBZ0RwRVdUdUtaUzMvY1ZDT1lXeDU4THIrQStkVFZadVlxSzUyYzcvbjBaSGRFbGpJMzYKdlFpMjdXb3l0b3JSVnpTZ1VJTDVnK1YrbU1JWk9NN0lLZ2x3b3VSUllUc2hkbll2Z0k1VXUzc3hDaVU3YkZKOApFR1FhRjhiK0JRS0JnUUNlaUNZaVIvZTdUZTdWc002TGwrcGxiR3YvOVBLWmdudlp3RlEwT2M2V05SbkJEQWRCCllvWWJJUnRUdG9TUHF6UldPSUJFVXJFaHRqMXIranE4UHkyT080dGViUk5Oa2pGRFRWcUdDVGJxSkFLWGhtMlAKNVIyckF0Q0J2SUFweW1NNjNLRVVmWVEwSUkwc0RLNi9qckNkR2VhcDBFazcxVklIMEpodi9QS2UyUUtCZ1FDdwpkVE0rd2tQU2VwRjBMNUM5UlFURStQUUFkMEdaZ0E3aHBBcTVVNVNjNGFmU0JVMUkxbDRJWGF5aWM4UnNqS3hPCmltRm1nYVBDUUtnYS80TWNHaGtwdTBLZ09JZFFLYXV2Y1RWcW9vNXF1Rm5maXNueFd0NC9SZVVRNG4vSjNZeGoKQ0tLWjlDeXROVnA3bTRXTEtDQUxuWXRENUV0dUJFZ0R0N1ZueU90UnBRS0JnSFlSSkZ0eTdLVnJVdzNDY0J2TwpDRDVDY05RWWpzQ0ZyTWp4ZVVCdlRFdzkva2tIYjZaVkNGSFdwQitxL0EzZnAyanc5N0NxbXRIZ052V3RvMW9RClZZK1g0TUMwd2VZdkhMNjFsYzZCZ0UzOXBIcHVqUXIydkpNTFVkMHk0bFl0SHRRRVZidE1IbTBNQU1IWnhoNG4KWXFjYnJ0a2NtL1BDV05rbmxidU9PRUVMCi0tLS0tRU5EIFBSSVZBVEUgS0VZLS0tLS0K
kind: Secret
metadata:
  creationTimestamp: 2019-05-26T13:50:26Z
  name: tls-example
  namespace: default
  resourceVersion: "30006"
  selfLink: /api/v1/namespaces/default/secrets/tls-example
  uid: 3766eba9-7fbd-11e9-8e45-0242ac11000f
type: kubernetes.io/tls

3 같이 보기[ | ]

4 참고[ | ]

https://kubernetes.github.io/ingress-nginx/user-guide/tls/