Commit 4dae7422 authored by Kevin Di Lallo's avatar Kevin Di Lallo
Browse files

added self-signed meep-ingress certificate

parent 165a763b

charts/docker-registry/create-signed-cert.sh→charts/docker-registry/create-k8s-ca-signed-cert.sh

+1 −1
Original line number Diff line number Diff line
@@ -51,7 +51,7 @@ while [[ $# -gt 0 ]]; do 
done



[ -z ${service} ] && service=meep-docker-registry

[ -z ${secret} ] && secret=meep-docker-registry-certs

[ -z ${secret} ] && secret=meep-docker-registry

[ -z ${namespace} ] && namespace=default

[ -z ${certdir} ] && certdir=$(mktemp -d)

charts/docker-registry/values.yaml

+1 −1
Original line number Diff line number Diff line
@@ -75,7 +75,7 @@ storage: filesystem 


# Set this to name of secret for tls certs

# tlsSecretName: registry.docker.example.com

tlsSecretName: meep-docker-registry-certs

tlsSecretName: meep-docker-registry

secrets:

  haSharedSecret: ""

  htpasswd: ""

charts/nginx-ingress/create-self-signed-cert.sh

0 → 100755
+63 −0
Original line number Diff line number Diff line 
#!/bin/bash

set -e



usage() {

    cat <<EOF

Generate self signed certificate & secret.



usage: ${0} [OPTIONS]



The following flags are required.



       --service          Service name of registry.

       --namespace        Namespace where registry service and secret reside.

       --secret           Secret name for CA certificate and server certificate/key pair.

       --certdir          Directory where certificates should be stored.

EOF

    exit 1

}



while [[ $# -gt 0 ]]; do

    case ${1} in

        --service)

            service="$2"

            shift

            ;;

        --secret)

            secret="$2"

            shift

            ;;

        --namespace)

            namespace="$2"

            shift

            ;;

        --certdir)

            certdir="$2"

            shift

            ;;

        *)

            usage

            ;;

    esac

    shift

done



[ -z ${service} ] && service=meep-ingress

[ -z ${secret} ] && secret=meep-ingress

[ -z ${namespace} ] && namespace=default

[ -z ${certdir} ] && certdir=$(mktemp -d)



if [ ! -x "$(command -v openssl)" ]; then

    echo "openssl not found"

    exit 1

fi



echo "creating certs in certdir: ${certdir}"

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout ${certdir}/${service}.key -out ${certdir}/${service}.pem -subj "/CN=AdvantEDGE Default Certificate/O=InterDigital"



echo "creating secret: ${namespace}/${secret}"

kubectl create secret tls ${secret} \

    --key ${certdir}/${service}.key \

    --cert ${certdir}/${service}.pem \

    --dry-run -o yaml | 

    kubectl -n ${namespace} apply -f -
 
 No newline at end of file

charts/nginx-ingress/values.yaml

+2 −1
Original line number Diff line number Diff line
@@ -112,7 +112,8 @@ controller: 
  ## E.g. to specify the default SSL certificate you can use

  ## extraArgs:

  ##   default-ssl-certificate: "<namespace>/<secret_name>"

  extraArgs: {}

  extraArgs:

    default-ssl-certificate: "default/meep-ingress"



  ## Additional environment variables to set

  extraEnvs: []