From: stephan48 <stephan48@web>
Date: Mon, 27 Mar 2023 21:42:39 +0000 (+0200)
Subject: (no commit message)
X-Git-Url: https://blog.stejau.de/gitweb/gitweb.cgi?a=commitdiff_plain;h=6872812563e415fa09cd695647b4b7f951861c9c;p=stejau-blog.git

---

diff --git a/posts/2023-03-27-k8s-cluster-step-ca-from-scratch.mdwn b/posts/2023-03-27-k8s-cluster-step-ca-from-scratch.mdwn
index 343417d..1785bc1 100644
--- a/posts/2023-03-27-k8s-cluster-step-ca-from-scratch.mdwn
+++ b/posts/2023-03-27-k8s-cluster-step-ca-from-scratch.mdwn
@@ -2,8 +2,11 @@
 
 This is just a wip command by command play by play for now, i will add context and infos later(TM).
 
+random comments:
+
 - root$ denotes stuff done as root
 - $ denotes stuff done as normal user
+- you totally can use a different easy-rsa instance to generate your sub-ca, it does not need to be done in the root-ca "pki" - i will try to mark the points where you need to divert at a later time, essentially you need two easy-rsa instances(go figure, one with a ca build and one without - and then move the CSR/Finished cert between them)
 
 
 ```