infra/kubernetes
1
0
Fork 0
Code Pull Requests 3 Activity

dch-webhooks: Configure SSH cert signer

Browse Source 
The *dch-webhooks* tool now provides an operation for hosts to request a
signed SSH certificate from the SSH CA.  It's primarily useful for
unattended deployments like CoreOS Ignition, where hosts do not have
any credentials to authenticate with the CA directly.
This commit is contained in:
Dustin
2023-10-09 08:07:29 -05:00
parent 92a5aee7b4
commit f7a8f391ea
7 changed files with 88 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
dch-webhooks/dch-webhooks.env Normal file
View File

@@ -0,0 +1,9 @@
FIREFLY_URL=http://firefly-iii.firefly-iii.svc.cluster.local:8080
FIREFLY_AUTH_TOKEN=/run/secrets/du5t1n.me/firefly/firefly.token
PAPERLESS_URL=http://paperless-ngx.paperless-ngx.svc.cluster.local:8000
PAPERLESS_AUTH_TOKEN=/run/secrets/du5t1n.me/paperless/paperless.token
STEP_CA_URL=https://ca.pyrocufflink.blue:32599
STEP_ROOT=/run/dch-root-ca.crt
STEP_PROVISIONER=host-bootstrap
STEP_PROVISIONER_PASSWORD_FILE=/run/secrets/du5t1n.me/step-ca/provisioner.password