proposalbot
a70a2c8b2e
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: proposalbot <proposalbot@otc-service.com> Co-committed-by: proposalbot <proposalbot@otc-service.com>
32 lines
1.0 KiB
ReStructuredText
32 lines
1.0 KiB
ReStructuredText
:original_name: cce_01_0175.html
|
|
|
|
.. _cce_01_0175:
|
|
|
|
Obtaining a Cluster Certificate
|
|
===============================
|
|
|
|
Scenario
|
|
--------
|
|
|
|
Before accessing cluster resources through open-source Kubernetes APIs, obtain the cluster's certificate.
|
|
|
|
Procedure
|
|
---------
|
|
|
|
#. Log in to the CCE console. In the navigation pane, choose **Resource Management** > **Clusters**.
|
|
|
|
#. In the card view of the target cluster, choose **More** > **Download X.509 Certificate**.
|
|
|
|
#. In the **Download X.509 Certificate** dialog box displayed, select the certificate expiration time and download the X.509 certificate of the cluster as prompted.
|
|
|
|
|
|
.. figure:: /_static/images/en-us_image_0000001190859184.png
|
|
:alt: **Figure 1** Downloading a certificate
|
|
|
|
**Figure 1** Downloading a certificate
|
|
|
|
.. important::
|
|
|
|
- The downloaded certificate contains three files: **client.key**, **client.crt**, and **ca.crt**. Keep these files secure.
|
|
- Certificates are not required for mutual access between containers in a cluster.
|