X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=blobdiff_plain;f=ocd%2Finfra%2Fplaybooks%2Froles%2Fapplcm%2Ftasks%2Finstall.yml;h=f907387fe345791c4a078001329df5da747e214f;hb=bc297bf1d5d2a7ea975e5ad9d0cbb744cb952322;hp=12c7aa45b23086d2b49cd1e8c38e8bbe7d9822ef;hpb=b747fd2db81a059a8fa8e3acb23ca2c5980fc93b;p=ealt-edge.git

diff --git a/ocd/infra/playbooks/roles/applcm/tasks/install.yml b/ocd/infra/playbooks/roles/applcm/tasks/install.yml
index 12c7aa4..f907387 100644
--- a/ocd/infra/playbooks/roles/applcm/tasks/install.yml
+++ b/ocd/infra/playbooks/roles/applcm/tasks/install.yml
@@ -18,6 +18,43 @@
     src: deploy
     dest: /tmp/applcm/
 
+- name: Generate Certificates
+  shell:
+# yamllint disable rule:line-length
+    cmd: openssl genrsa -out ca.key 2048
+    chdir: /tmp/applcm/deploy/
+
+- name: Generate Certificate - Step 2
+  shell:
+    cmd: openssl req -new -key ca.key -subj /C=CN/ST=Peking/L=Beijing/O=ealtedge/CN=www.ealtedge.org -out ca.csr
+    chdir: /tmp/applcm/deploy/
+
+- name: Generate Root Certificate
+  shell:
+    cmd: openssl x509 -req -days 365 -in ca.csr -extensions v3_req -signkey ca.key -out trust.cer
+    chdir: /tmp/applcm/deploy/
+
+- name: Generate Server Key
+  shell:
+    cmd: openssl genrsa -out server_key.pem 2048
+    chdir: /tmp/applcm/deploy/
+
+
+- name: Generate Server CSR
+  shell:
+    cmd: openssl req -new -key server_key.pem -subj /C=CN/ST=Beijing/L=Beijing/O=ealtedge/CN=www.ealtedge.org -out tls.csr
+    chdir: /tmp/applcm/deploy/
+
+- name: Generate Server Certificate
+  shell:
+    cmd: openssl x509 -req -in tls.csr -extensions v3_req -CA trust.cer -CAkey ca.key -CAcreateserial -out server.cer
+    chdir: /tmp/applcm/deploy/
+
+- name: Create applcm-secret
+  shell:
+# yamllint disable rule:line-length
+    cmd: kubectl create secret --namespace default generic applcm-secret --from-file=/tmp/applcm/deploy/server.cer --from-file=/tmp/applcm/deploy/server_key.pem --from-file=/tmp/applcm/deploy/trust.cer
+
 - name: Install applcm postgres-configmap
   shell:
     cmd: kubectl apply -f /tmp/applcm/deploy/postgres-config.yaml