You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
34 lines
1.4 KiB
34 lines
1.4 KiB
ws=/home/cristian/Workspace/sapian/gitops/ssdnodes/k3s-sapian-cloud/users
|
|
day=3650
|
|
|
|
clus_name="k3s-sapian-cloud"
|
|
clus_ns="default"
|
|
user="cristian.marin"
|
|
#clus_url="https://10.200.100.183:7442"
|
|
clus_url="https://k3s.sapian.cloud:6443" ##
|
|
ca_path=$ws/server/tls
|
|
rm -f $ca_path/*-ca.srl
|
|
|
|
ctx=gen && mkdir -p $ws/$ctx/{kube,keys} && cd $ws/$ctx
|
|
#############
|
|
ca1=client-ca
|
|
generate="keys/u-"$user
|
|
echo -e "\033[32m#>>GEN-KEY\033[0m"
|
|
#openssl genrsa -out $generate.key 2048
|
|
openssl ecparam -name prime256v1 -genkey -noout -out $generate.key
|
|
openssl req -new -key $generate.key -out $generate.csr -subj "/CN=${user}@${clus_name}/O=key-gen"
|
|
openssl x509 -req -in $generate.csr -CA $ca_path/$ca1.crt -CAkey $ca_path/$ca1.key -CAcreateserial -out $generate.crt -days $day
|
|
|
|
#-----------
|
|
#generate=$ca_path/client-admin ##test
|
|
ca2=server-ca
|
|
embed=false
|
|
ctx2="$user@$clus_name"
|
|
config="kube/$user.kubeconfig"
|
|
echo -e "\033[32m#>>KUBE-CONFIG\033[0m"
|
|
kubectl --kubeconfig=$config config set-cluster $clus_name --embed-certs=$embed --server=$clus_url --certificate-authority=$ca_path/$ca2.crt
|
|
kubectl --kubeconfig=$config config set-credentials $ctx2 --embed-certs=$embed --client-certificate=$generate.crt --client-key=$generate.key
|
|
kubectl --kubeconfig=$config config set-context $ctx2 --cluster=$clus_name --namespace=$clus_ns --user=$ctx2
|
|
#kubectl --kubeconfig=$config config set current-context $ctx2
|
|
#kubectl --kubeconfig=$config --context=$ctx2 get pods
|