http://www.projectatomic.io/docs/gettingstarted/
There is an IP missing in the EasySSL steps. In addition to the MASTER_IP, you need to add 10.254.0.1 to the list to ensure applications run in containers (such as the Kubernetes dashboard) can access the API Server.
./easyrsa --subject-alt-name="IP:${MASTER_IP}" build-server-full server nopass
should be:
./easyrsa --subject-alt-name="IP:${MASTER_IP},IP:10.254.0.1" build-server-full server nopass
That change results in the ability to deploy the Kubernetes dashboard via:
kubectl create -f https://git.io/kube-dashboard
Without this change, you get complaints from Kubernetes dashboard about "server certificate only for (MASTER_IP here)
http://www.projectatomic.io/docs/gettingstarted/
There is an IP missing in the EasySSL steps. In addition to the MASTER_IP, you need to add 10.254.0.1 to the list to ensure applications run in containers (such as the Kubernetes dashboard) can access the API Server.
./easyrsa --subject-alt-name="IP:${MASTER_IP}" build-server-full server nopass
should be:
./easyrsa --subject-alt-name="IP:${MASTER_IP},IP:10.254.0.1" build-server-full server nopass
That change results in the ability to deploy the Kubernetes dashboard via:
kubectl create -f https://git.io/kube-dashboard
Without this change, you get complaints from Kubernetes dashboard about "server certificate only for (MASTER_IP here)