RKE2 the Hard Way: Part 2 – Certificate Authority and TLS Certificates

Tue, 01 Apr 2025 00:00:00 +0000

Part 2 – Certificate Authority and TLS Certificates

In this part of the “RKE2 the Hard Way” training series, we will set up our own Certificate Authority (CA) and generate the necessary TLS certificates for securing our Kubernetes cluster. Kubernetes components communicate over TLS, and properly configured certificates are crucial for cluster security.

We’ll use cfssl, Cloudflare’s TLS toolkit, to create our CA and generate certificates.

✅ Assumption: All commands in this guide are run from node01, which is a Linux box.

Cfssl on Support Tools

RKE2 the Hard Way: Part 2 – Certificate Authority and TLS Certificates

Part 2 – Certificate Authority and TLS Certificates