From 8a971eb5cd805094a3a9b4881c4cc192afcb7821 Mon Sep 17 00:00:00 2001 From: Rajashree Mandaogane Date: Thu, 11 Mar 2021 11:59:03 -0800 Subject: [PATCH] Update cert generation Makefile to include configurable IP addresses --- hack/tls-setup/Makefile | 12 ++++++------ hack/tls-setup/README.md | 8 +++++++- 2 files changed, 13 insertions(+), 7 deletions(-) diff --git a/hack/tls-setup/Makefile b/hack/tls-setup/Makefile index 9f83de16965..a1d48ac9bf3 100644 --- a/hack/tls-setup/Makefile +++ b/hack/tls-setup/Makefile @@ -19,32 +19,32 @@ req: -ca certs/ca.pem \ -ca-key certs/ca-key.pem \ -config config/ca-config.json \ - config/req-csr.json | $(JSON) -bare certs/9.145.89.120 + config/req-csr.json | $(JSON) -bare certs/${infra0} $(CFSSL) gencert \ -ca certs/ca.pem \ -ca-key certs/ca-key.pem \ -config config/ca-config.json \ - config/req-csr.json | $(JSON) -bare certs/9.145.89.173 + config/req-csr.json | $(JSON) -bare certs/${infra1} $(CFSSL) gencert \ -ca certs/ca.pem \ -ca-key certs/ca-key.pem \ -config config/ca-config.json \ - config/req-csr.json | $(JSON) -bare certs/9.145.89.225 + config/req-csr.json | $(JSON) -bare certs/${infra2} $(CFSSL) gencert \ -ca certs/ca.pem \ -ca-key certs/ca-key.pem \ -config config/ca-config.json \ - config/req-csr.json | $(JSON) -bare certs/peer-9.145.89.120 + config/req-csr.json | $(JSON) -bare certs/peer-${infra0} $(CFSSL) gencert \ -ca certs/ca.pem \ -ca-key certs/ca-key.pem \ -config config/ca-config.json \ - config/req-csr.json | $(JSON) -bare certs/peer-9.145.89.173 + config/req-csr.json | $(JSON) -bare certs/peer-${infra1} $(CFSSL) gencert \ -ca certs/ca.pem \ -ca-key certs/ca-key.pem \ -config config/ca-config.json \ - config/req-csr.json | $(JSON) -bare certs/peer-9.145.89.225 + config/req-csr.json | $(JSON) -bare certs/peer-${infra2} clean: rm -rf certs diff --git a/hack/tls-setup/README.md b/hack/tls-setup/README.md index 14618793572..c4ec79dc213 100644 --- a/hack/tls-setup/README.md +++ b/hack/tls-setup/README.md @@ -28,4 +28,10 @@ Example: ] } ``` -3. Run `make` to generate the certs +3. Set the following environment variables subsituting your IP address: +```bash +export infra0={IP-0} +export infra1={IP-1} +export infra2={IP-2} +``` +4. Run `make` to generate the certs