Get apiserver to start

pkg/cluster/services.go

@@ -56,7 +56,7 @@ func (s *ClusterServices) startK8sMaster(pki *ClusterPKI, certs *MasterCerts) {
 		"--bind-address", "::",
 		"--tls-cert-file", certs.Service.CertPath(),
 		"--tls-private-key-file", certs.Service.KeyPath(),
-		"--client-ca-file", pki.API.Path,
+		"--client-ca-file", pki.API.CertPath(),
 		"--kubelet-certificate-authority", pki.Kubelet.CertPath(),
 		"--kubelet-client-certificate", certs.Kubelet.CertPath(),
 		"--kubelet-client-key", certs.Kubelet.KeyPath(),

pkg/pki/io.go

@@ -29,7 +29,7 @@ func (f FileIO) blockFor(t Type) *pem.Block {
 	var blockType string
 	switch t {
 	case KeyType:
-		blockType = "ECDSA PRIVATE KEY"
+		blockType = "EC PRIVATE KEY"
 	case CertType:
 		blockType = "CERTIFICATE"
 	case CSRType: