<p>Running CoreOS, etcd is not secured by default. To secure it I can use TLS, which adds a level of complexity I'm willing to work on. </p>

<p>Now, is Kubernetes able to use a TLS secured etcd cluster? </p>

<p>In the config for the kubelet and various pods, Kubernetes passes the etcd endpoints as parameters, so they require etcd and will need the certificates to talk to it if it is secured. 
If Kubernetes supports TLS connection to etcd, how does it get configured? </p>

<p>Thanks</p>

<p>digging further and asking on the github project, I was directed towards this post that I hope answers the question: </p>

<p><a href="https://groups.google.com/forum/#!topic/google-containers/bTfEcRQ3N28/discussion" rel="nofollow">https://groups.google.com/forum/#!topic/google-containers/bTfEcRQ3N28/discussion</a></p>

<p>In short the config file should look like:</p>

<pre><code>{
  "cluster": {
    "machines": [
          "https://kube-master.internal:2379",
          "https://kube-minion1.internal:2379",
          "https://kube-minion2.internal:2379"
    ]
  },
  "config": {
    "certFile": "/etc/etcd/kube-master.internal.pem",
    "keyFile": "/etc/etcd/kube-master.internal.key",
    "caCertFiles": [ "/etc/etcd/kubecluster-ca.pem" ],
    "consistency": "STRONG_CONSISTENCY"
  }
}
</code></pre>

<p>Haven't tried yet but will asap.</p>
