Skip to content

Commit

Permalink
Update _index.md (#916)
Browse files Browse the repository at this point in the history
Signed-off-by: Rohan <rohan.rd07@gmail.com>
  • Loading branch information
Rohan-Dah committed Jul 17, 2023
1 parent 8d5e5a5 commit 78ab13a
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions content/en/docs/Installation/_index.md
Expand Up @@ -325,10 +325,10 @@ To create the required Secrets, use the following commands (do not change the Se

```sh
kubectl create ns <namespace>
kubectl create secret tls kyverno-svc.kyverno.svc.kyverno-tls-pair --cert=tls.crt --key=tls.key -n <namespace>
kubectl annotate secret kyverno-svc.kyverno.svc.kyverno-tls-pair self-signed-cert=true -n <namespace>
kubectl create secret generic kyverno-svc.kyverno.svc.kyverno-tls-ca --from-file=rootCA.crt -n <namespace>
kubectl annotate secret kyverno-svc.kyverno.svc.kyverno-tls-ca self-signed-cert=true -n <namespace>
kubectl create secret tls kyverno-svc.<namespace where Kyverno will be installed>.svc.kyverno-tls-pair --cert=tls.crt --key=tls.key -n <namespace>
kubectl annotate secret kyverno-svc.<namespace where Kyverno will be installed>.kyverno-tls-pair self-signed-cert=true -n <namespace>
kubectl create secret generic kyverno-svc.<namespace where Kyverno will be installed>.svc.kyverno-tls-ca --from-file=rootCA.crt -n <namespace>
kubectl annotate secret kyverno-svc.<namespace where Kyverno will be installed>.svc.kyverno-tls-ca self-signed-cert=true -n <namespace>
```

{{% alert title="Note" color="info" %}}
Expand All @@ -337,8 +337,8 @@ The annotation on the TLS pair secret is used by Kyverno to identify the use of

Secret | Data | Content
------------ | ------------- | -------------
`kyverno-svc.kyverno.svc.kyverno-tls-pair` | tls.key & tls.crt | key and signed certificate
`kyverno-svc.kyverno.svc.kyverno-tls-ca` | rootCA.crt | root CA used to sign the certificate
`kyverno-svc.<namespace where Kyverno will be installed>.svc.kyverno-tls-pair` | tls.key & tls.crt | key and signed certificate
`kyverno-svc.<namespace where Kyverno will be installed>.svc.kyverno-tls-ca` | rootCA.crt | root CA used to sign the certificate

Kyverno uses Secrets created above to setup TLS communication with the kube-apiserver and specify the CA bundle to be used to validate the webhook server's certificate in the admission webhook configurations.

Expand Down

0 comments on commit 78ab13a

Please sign in to comment.