cloud-container-engine/umn/source/clusters/obtaining_a_cluster_certificate.rst

1.0 KiB

original_name

cce_01_0175.html

Obtaining a Cluster Certificate

Scenario

Before accessing cluster resources through open-source Kubernetes APIs, obtain the cluster's certificate.

Procedure

  1. Log in to the CCE console. In the navigation pane, choose Resource Management > Clusters.

  2. In the card view of the target cluster, choose More > Download X.509 Certificate.

  3. In the Download X.509 Certificate dialog box displayed, select the certificate expiration time and download the X.509 certificate of the cluster as prompted.

    Figure 1 Downloading a certificate

    Important

    • The downloaded certificate contains three files: client.key, client.crt, and ca.crt. Keep these files secure.
    • Certificates are not required for mutual access between containers in a cluster.