Mirroristas/etcd
2
0
Fork 0
mirror of https://github.com/etcd-io/etcd.git synced 2024-09-27 06:25:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update cert generation Makefile to include configurable IP addresses

Browse Source
This commit is contained in:
Rajashree Mandaogane 2021-03-11 11:59:03 -08:00
parent 3ead91ca3e
commit 8a971eb5cd
2 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
hack/tls-setup/Makefile
View File

@ -19,32 +19,32 @@ req:
-ca certs/ca.pem \ -ca certs/ca.pem \
-ca-key certs/ca-key.pem \ -ca-key certs/ca-key.pem \
-config config/ca-config.json \ -config config/ca-config.json \
config/req-csr.json | $(JSON) -bare certs/9.145.89.120 config/req-csr.json | $(JSON) -bare certs/${infra0}
$(CFSSL) gencert \ $(CFSSL) gencert \
-ca certs/ca.pem \ -ca certs/ca.pem \
-ca-key certs/ca-key.pem \ -ca-key certs/ca-key.pem \
-config config/ca-config.json \ -config config/ca-config.json \
config/req-csr.json | $(JSON) -bare certs/9.145.89.173 config/req-csr.json | $(JSON) -bare certs/${infra1}
$(CFSSL) gencert \ $(CFSSL) gencert \
-ca certs/ca.pem \ -ca certs/ca.pem \
-ca-key certs/ca-key.pem \ -ca-key certs/ca-key.pem \
-config config/ca-config.json \ -config config/ca-config.json \
config/req-csr.json | $(JSON) -bare certs/9.145.89.225 config/req-csr.json | $(JSON) -bare certs/${infra2}
$(CFSSL) gencert \ $(CFSSL) gencert \
-ca certs/ca.pem \ -ca certs/ca.pem \
-ca-key certs/ca-key.pem \ -ca-key certs/ca-key.pem \
-config config/ca-config.json \ -config config/ca-config.json \
config/req-csr.json | $(JSON) -bare certs/peer-9.145.89.120 config/req-csr.json | $(JSON) -bare certs/peer-${infra0}
$(CFSSL) gencert \ $(CFSSL) gencert \
-ca certs/ca.pem \ -ca certs/ca.pem \
-ca-key certs/ca-key.pem \ -ca-key certs/ca-key.pem \
-config config/ca-config.json \ -config config/ca-config.json \
config/req-csr.json | $(JSON) -bare certs/peer-9.145.89.173 config/req-csr.json | $(JSON) -bare certs/peer-${infra1}
$(CFSSL) gencert \ $(CFSSL) gencert \
-ca certs/ca.pem \ -ca certs/ca.pem \
-ca-key certs/ca-key.pem \ -ca-key certs/ca-key.pem \
-config config/ca-config.json \ -config config/ca-config.json \
config/req-csr.json | $(JSON) -bare certs/peer-9.145.89.225 config/req-csr.json | $(JSON) -bare certs/peer-${infra2}
clean: clean:
rm -rf certs rm -rf certs

8
hack/tls-setup/README.md
View File

@ -28,4 +28,10 @@ Example:
] ]
} }
``` ```
3. Run `make` to generate the certs 3. Set the following environment variables subsituting your IP address:
```bash
export infra0={IP-0}
export infra1={IP-1}
export infra2={IP-2}
```
4. Run `make` to generate the certs