Setting up a master and worker node for TLS bootstrapping can be tricky because many configuration steps are involved, so we decided to walk you through the process of enabling this useful feature in Kubernetes. Let’s get started!

What Is TLS Bootstrapping?

Kubernetes recommends making communication between node components such as kubelet and kube-proxy and master components private and secure. To achieve this, we need to distribute TLS certificates for node components and sign them with the master CA. Prior to Kubernetes v1.4, users had to do most of the TLS bootstrapping work such as issuing and distributing certificates manually. …