At it's simplest, just a couple of flags (--upload-certs from the init node, and --control-plane from the joining masters).
It gets a bit more complicated when you automate it and support adding/replacing nodes - the uploaded certs are valid only for 2h for example. (IMO the easiest solution to that is manual cert distribution - i.e. just scping them to the joining nodes.)
Comments
At it's simplest, just a couple of flags (--upload-certs from the init node, and --control-plane from the joining masters).
It gets a bit more complicated when you automate it and support adding/replacing nodes - the uploaded certs are valid only for 2h for example. (IMO the easiest solution to that is manual cert distribution - i.e. just scping them to the joining nodes.)