vault job yaml file

kind: ConfigMap

metadata:

  name: vault-prepare-certs

  namespace: mon

  namespace: ocf-vault

  labels:

    io.kompose.service: api-invocation-logs

    app: capif

     # to execute the next commands in vault

     # otherwise, if use the vault as dev's mode. Just

     # type the token's dev.

     export VAULT_TOKEN="dev-only-token"

     export DOMAIN1=capif.mobilesandbox.cloud

     export VAULT_TOKEN="hvs.mn50Q8kpMuxsPUsCNlwQekCd"

     export DOMAIN1=*.pre-prod.int

     export DOMAIN2=*.staging.int

     export DOMAIN3=*.developer.int

     # local domains

     # export DOMAIN4=*.pre-prod.svc.cluster.local

     # export DOMAIN5=*.staging.svc.cluster.local

     # export DOMAIN6=*.developer.svc.cluster.local

     vault secrets enable pki

     vault write pki_int/intermediate/set-signed certificate=@capif_intermediate.cert.pem

     #Crear rol en Vault

     vault write pki_int/roles/my-ca use_csr_common_name=false require_cn=false allowed_domains="*" allow_any_name=true allow_bare_domains=true allow_glob_domains=true allow_subdomains=true max_ttl=4300h ttl=4300h

     vault write pki_int/roles/my-ca use_csr_common_name=true require_cn=false allowed_domains="*" allow_any_name=true allow_bare_domains=true allow_glob_domains=true allow_subdomains=true max_ttl=4300h ttl=4300h

     # Emitir un certificado firmado por la CA intermedia

     # vault write -format=json pki_int/issue/my-ca \

     DNS.3 = \$ENV::DOMAIN3

     EOF

     export DOMAIN2=nginx.mon.svc.cluster.local

     export DOMAIN3=nginx.mon-staging.svc.cluster.local

     export COUNTRY=ES                # 2 letter country-code

     export STATE=Madrid            # state or province name

     export LOCALITY=Madrid        # Locality Name (e.g. city)

kind: Job

metadata:

  name: vault-pki

  namespace: mon

  namespace: ocf-vault

  labels:

    io.kompose.service: vault-pki

    app: capif