当提供客户端证书/密钥时,该标志的行为存在一个未决问题(https://github.com/kubernetes/kubernetes/iss...
I run the kube-apiserver with my self-signed certificate: /opt/bin/kube-apiserver \ --etcd_servers=http://master:2379,http://slave1:2379,http://slave2:2379 \ --logtostderr=false \ --v=4 \ --client-ca-file=/home/kubernetes/ssl/ca.crt \ --service-cluster-ip-range=192.168.3.0/...
tlsConfig.InsecureSkipVerify=true// Regardless of whether the user sets it to true or false, if they// specify --tlsverify at all then we need to turn on tlsifflag.IsSet("-tlsverify") { *flTls =true}// If we should verify the server, we need to load a trusted caif*flTlsVerify...