Skip to content

Commit 330fa13

Browse files
Update etcd-certificates.adoc
The etcd-metric-client client secret is present in openshift-etcd namespace, and not in openshift-config / openshift-monitoring / openshift-kube-apiserver namespaces starting from RHOCP version 4.16 and above. Previously till RHOCP version 4.15, it was present in the openshift-config namespace.
1 parent a03e2ba commit 330fa13

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

security/certificate_types_descriptions/etcd-certificates.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ These certificates are only managed by the system and are automatically rotated.
2727
etcd certificates are used for encrypted communication between etcd member peers and encrypted client traffic. The following certificates are generated and used by etcd and other processes that communicate with etcd:
2828

2929
* Peer certificates: Used for communication between etcd members.
30-
* Client certificates: Used for encrypted server-client communication. Client certificates are currently used by the API server only, and no other service should connect to etcd directly except for the proxy. Client secrets (`etcd-client`, `etcd-metric-client`, `etcd-metric-signer`, and `etcd-signer`) are added to the `openshift-config`, `openshift-monitoring`, and `openshift-kube-apiserver` namespaces.
30+
* Client certificates: Used for encrypted server-client communication. Client certificates are currently used by the API server only, and no other service should connect to etcd directly except for the proxy. Client secrets (`etcd-client`, `etcd-metric-client`, `etcd-metric-signer`, and `etcd-signer`) are added to the `openshift-config`, `openshift-etcd`, `openshift-monitoring`, and `openshift-kube-apiserver` namespaces.
3131
* Server certificates: Used by the etcd server for authenticating client requests.
3232
* Metric certificates: All metric consumers connect to proxy with metric-client certificates.
3333

0 commit comments

Comments
 (0)