diff --git a/helm/vault-job/vault-job.yaml b/helm/vault-job/vault-job.yaml index 8f683e230bdb3c8cb401928774cd600744f76137..e30a39408bc20c999908eefe1bf34e98f2aead2c 100644 --- a/helm/vault-job/vault-job.yaml +++ b/helm/vault-job/vault-job.yaml @@ -3,7 +3,7 @@ apiVersion: v1 kind: ConfigMap metadata: name: vault-prepare-certs - namespace: mon + namespace: ocf-vault labels: io.kompose.service: api-invocation-logs app: capif @@ -25,8 +25,15 @@ data: # to execute the next commands in vault # otherwise, if use the vault as dev's mode. Just # type the token's dev. - export VAULT_TOKEN="dev-only-token" - export DOMAIN1=capif.mobilesandbox.cloud + export VAULT_TOKEN="hvs.mn50Q8kpMuxsPUsCNlwQekCd" + export DOMAIN1=*.pre-prod.int + export DOMAIN2=*.staging.int + export DOMAIN3=*.developer.int + + # local domains + # export DOMAIN4=*.pre-prod.svc.cluster.local + # export DOMAIN5=*.staging.svc.cluster.local + # export DOMAIN6=*.developer.svc.cluster.local vault secrets enable pki @@ -69,7 +76,7 @@ data: vault write pki_int/intermediate/set-signed certificate=@capif_intermediate.cert.pem #Crear rol en Vault - vault write pki_int/roles/my-ca use_csr_common_name=false require_cn=false allowed_domains="*" allow_any_name=true allow_bare_domains=true allow_glob_domains=true allow_subdomains=true max_ttl=4300h ttl=4300h + vault write pki_int/roles/my-ca use_csr_common_name=true require_cn=false allowed_domains="*" allow_any_name=true allow_bare_domains=true allow_glob_domains=true allow_subdomains=true max_ttl=4300h ttl=4300h # Emitir un certificado firmado por la CA intermedia # vault write -format=json pki_int/issue/my-ca \ @@ -119,8 +126,6 @@ data: DNS.3 = \$ENV::DOMAIN3 EOF - export DOMAIN2=nginx.mon.svc.cluster.local - export DOMAIN3=nginx.mon-staging.svc.cluster.local export COUNTRY=ES # 2 letter country-code export STATE=Madrid # state or province name export LOCALITY=Madrid # Locality Name (e.g. city) @@ -222,7 +227,7 @@ apiVersion: batch/v1 kind: Job metadata: name: vault-pki - namespace: mon + namespace: ocf-vault labels: io.kompose.service: vault-pki app: capif