[title]证书准备工作[/title] openssl genrsa -out ca.key 2048 openssl req -x509 -nodes -new -key ca.key -subj "/CN=k8s.root.ca" -days 7200 -out ca.crt openssl x509 -in ca.crt -text -noout openssl genrsa -out apiserver.key 2048 openssl req -new -key apiserver.key -subj…