etcd 证书的坑

１etcdctl put key value --key=/etc/kubernetes/pki/etcd/server.key --cert=/etc/kubernetes/pki/etcd/server.crt --cacert=/etc/kubernetes/pki/etcd/ca.crt

如果你的证书是自签名ca颁发，这三个证书参数缺一不可，

--cacert 不带报错authentication handshake failed: x509: certificate signed by unknown authority

２ETCD_LISTEN_CLIENT_URLS=https://0.0.0.0:2379

ETCD_ADVERTISE_CLIENT_URLS=https://0.0.0.0:2379要指定https