CFSSL as an external CA for non-ha kubeadm intialized clusters Using cfssl to Create an External CA Infrastructure Install cfssl # This requires an existing Go environment with GOPATH set go get -u github.com/cloudflare/cfssl/cmd/...