mirror of
https://github.com/open-cluster-management-io/ocm.git
synced 2026-05-08 10:17:17 +00:00
29 lines
1.1 KiB
Bash
Executable File
29 lines
1.1 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
proxy=${HUB_NAME:-proxy}
|
|
proxyctx="kind-${proxy}"
|
|
|
|
# create server certificate for proxy server
|
|
rm -rf tls
|
|
mkdir tls
|
|
openssl genrsa -out tls/root-ca.key 2048
|
|
openssl req -key tls/root-ca.key -subj "/CN=example.com" -new -x509 -days 3650 -out tls/root-ca.crt
|
|
openssl genrsa -out tls/squid.key 2048
|
|
openssl req -new -key tls/squid.key -subj "/CN=${proxy}-control-plane" -out tls/squid.csr
|
|
cat config/server-cert.conf | sed "s/<host_name>/$proxy-control-plane/g" > tls/server-cert.conf
|
|
openssl x509 -req -in tls/squid.csr -CA tls/root-ca.crt -CAkey tls/root-ca.key -CAcreateserial -out tls/squid.crt -days 3600 -extensions v3_ext -extfile tls/server-cert.conf
|
|
cat tls/squid.crt tls/squid.key >> tls/squid-cert-key.pem
|
|
|
|
kind create cluster --name "${proxy}"
|
|
|
|
kubectl config use ${proxyctx}
|
|
echo "setup proxy server - squid"
|
|
kubectl create ns squid
|
|
kubectl -n squid create secret generic squid-cert-key --from-file=squid-cert-key.pem=tls/squid-cert-key.pem
|
|
kubectl -n squid create configmap squid-config --from-file=squid=config/squid.conf
|
|
kubectl apply -f manifests/squid-deploy.yaml
|
|
kubectl apply -f manifests/squid-service.yaml
|
|
|
|
kubectl -n squid get pods
|