kubernetes x509证书认证

(umask 077; openssl genrsa -out liy.key 2048)
openssl req -new -key liy.key -out liy.csr -subj "/CN=liy/O=kubeadmins"
openssl x509 -req -days 3650 -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -in liy.csr -out liy.crt 
openssl x509 -in liy.crt -text -noout

kubectl  config set-credentials liy --client-certificate=liy.crt  --client-key=liy.key  --embed-certs=true
kubectl config set-context liy@kubernetes --cluster=kubernetes --user=liy