mirror of
https://github.com/optim-enterprises-bv/kubernetes.git
synced 2025-12-03 14:53:52 +00:00
According to kubeadm repo ticket 1665, /etc/pki can contain subdirectories with private keys on some distros. Avoid mounting the entire /etc/pki and mount /etc/pki/ca-trust and /etc/pki/tls/certs instead. These directories are mounted as an extra locations which can be used to search for additional system CAs.