I was trying to write a tutorial about how to setup Kubernetes on bare metal. I have created etcd cluster of 5 nodes that checks certificates of clients that co

I was trying to write a tutorial about how to setup Kubernetes on bare metal. I have created etcd cluster of 5 nodes that checks certificates of clients that communicate with it for security. Sadly I found that at least one command in Kubernetes is either not using provided certificates or I am doing something wrong. I can see that entries get created in etcd, so certificates are definitely correct, but kubectl get cs shows that etcd cluster is not healthy. Given that I see some parts of Kubernetes talk with etcd fine, but I am not able to tell the scope of correctness I am kind of blocked. I don't know whether this is something being worked on, or maybe should I look into it and possibly fix. Tried to ask on Kubernetes Slack, but nobody seemed too interested in this. I am guessing everyone is running etcd without checking certificate validity? Because I was able to run it this way, but that kind of feels wrong. I also wanted to check if problem exists with Kubernetes 1.4, but I couldn't find any migration guides. Maybe I'll just start again... Said article: https://medium.com/@elcct/kubernetes-on-bare-metal-part-5-kubernetes-master-b6a0388fa993 https://medium.com/@elcct/kubernetes-on-bare-metal-part-5-ku... and the ticket: https://github.com/kubernetes/kubernetes/issues/29330 https://github.com/kubernetes/kubernetes/issues/29330