Obtaining a Cluster Certificate

Before accessing cluster resources through open-source Kubernetes APIs, obtain the cluster's certificate.

Log in to the CCE console. In the navigation pane, choose Resource Management > Clusters.
In the card view of the target cluster, choose More > Download X.509 Certificate.
In the Download X.509 Certificate dialog box displayed, select the certificate expiration time and download the X.509 certificate of the cluster as prompted.

Figure 1 Downloading a certificate
- The downloaded certificate contains three files: client.key, client.crt, and ca.crt. Keep these files secure.
- Certificates are not required for mutual access between containers in a cluster.

Parent Topic: Clusters

Thank you very much for your feedback. We will continue working to improve the documentation.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel