搜索结果: "certificate"

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

RUN apk add --no-cache ca-certificates git upx

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

tags: [kubernetes, deployment, architecture, build, networking, storage, monitoring, configmap, security, certificate, docker, container]

certificateRefs:

kind: Certificate

ssl_certificate /etc/nginx/ssl/example.com.fullchain.pem;

ssl_certificate_key /etc/nginx/ssl/example.com.key;

**验证：** `openssl s_client -connect example.com:443` 检查 Certificate chain。

COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/

curl wget ca-certificates \

**故障链：** 某天上班发现 `kubectl` 全部报 `x509: certificate has expired` → 整个集群不可管理。

**预防：** 证书过期监控（Prometheus `ssl_cert_expiry`）、kubeadm 1.29+ 自动续期 `--feature-gates=RotateKubeletServerCertificate=true`。

- certificate: 证书管理与 TLS

| `certificate signed by unknown authority` | 证书不受信任 | 配置 `insecure-registries` 或导入 CA 证书 |

tags: [kubernetes, troubleshooting, node, production, monitoring, networking, certificate]