{
  "id": 7170841,
  "title": "[Lab Notes] Kubernetes the Hard Way, For Real This Time (Step 04)",
  "url": "https://urgent.news/2026/09/13/lab-notes-kubernetes-the-hard-way-for-real-this-time-step-04",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-13T20:22:17.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/lugerlogic/lab-notes-kubernetes-the-hard-way-for-real-this-time-step-04-3cc0"
  },
  "original_language": "en",
  "account": "In the fourth step of the Kubernetes the Hard Way guide, the author completes the process of establishing the cluster's public key infrastructure (PKI). This involves generating and installing a self-signed Certificate Authority (CA) key and certificate, as well as key and certificate pairs for each Kubernetes component.\n\nThe author begins by generating the CA key and self-signed CA certificate using OpenSSL commands. After confirming the generated files, they proceed to generate a key, Certificate Signing Request (CSR), and signed certificate for each Kubernetes component in a loop. The components include admin, both worker nodes, kube-proxy, kube-scheduler, kube-controller-manager, kube-api-server, and service-accounts.\n\nOnce the certificates for all components are generated, the author confirms that the expected files have been created. Finally, they distribute the CA certificate and each component's certificate and key to the appropriate nodes. The controller node receives the CA, API server, and service-account key/cert pairs, while the worker nodes receive their respective certificates and keys.\n\nWith Step 04 completed, the cluster's PKI is now established, enabling secure communication between all Kubernetes components.",
  "summary": "Continuing my Kubernetes the Hard Way homelab build on Proxmox. Steps 01-03 are already done, this covers step 04. Original guide: 04-certificate-authority.md Thoughts I had while doing this Before the actual step though, here are some stuff I learned or was thinking about along the way: Kubernetes is starting to feel like a miniaturized version of an entire IT infrastructure. Compute already got…",
  "key_points": [
    "Author completes Step 04 of Kubernetes the Hard Way guide",
    "Generates self-signed CA key and certificate using OpenSSL",
    "Distributes certificates and keys to appropriate cluster components"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}