Generate a signing key:
$ openssl genrsa -out /tmp/serviceaccount.key 2048
Update /etc/kubernetes/apiserver
:
KUBE_API_ARGS="--service_account_key_file=/tmp/serviceaccount.key"
Update /etc/kubernetes/controller-manager
:
KUBE_CONTROLLER_MANAGER_ARGS="--service_account_private_key_file=/tmp/serviceaccount.key"
如果要设置外部 path 则需要重写 nginx 路径, https://blog.lomo.cc/2017/12/05/install-kubernetes-troubleshooting/
annotations:
nginx.ingress.kubernetes.io/rewrite-target: /