helm pull bitnami/redis-cluster v8.3.8拉取源码生成证书
js
git clone https://github.com/redis/redis.git
#文档
https://redis.io/docs/management/security/encryption/#getting-started生成你的TLS证书用官网的工具生成
js
1 Run ./utils/gen-test-certs.sh 生成根CA和服务器证书
2 Run ./runtest --tls or ./runtest-cluster --tls 在TLS中运行Redis和Redis群集测试你的密钥
js
tls
|-- ca.crt
|-- ca.key
|-- ca.txt
|-- client.crt
|-- client.key
|-- openssl.cnf
|-- redis.crt
|-- redis.dh
|-- redis.key
|-- server.crt
-- server.key已修改好的项
vim values.yaml 修以下参数
js
certCAFilename: "ca.crt"
certKeyFilename: "redis.key"
certFilename: "redis.crt"
certificatesSecret: "my-tls-secret" kubectl -n sport create secret generic my-tls-secret --from-file=./redis.crt --from-file=./redis.key --from-file=./ca.crt最后安装
js
helm install -n sport sport redis-cluster -f ./redis-cluster/values.yaml --set tls.clientAuth=false --set replica.replicaCount=6客户端连接
js
redis-cli -c -h 192.168.0.195 -p 58958 -a 123000abc --tls --cert client.crt --key client.key --cacert ca.crt