adding client directory and pk8 key option

Author: timveil

example-secure/README.md

@@ -37,4 +37,11 @@ docker exec -ti roach-1 /bin/bash
 docker exec -ti roach-2 /bin/bash
 docker exec -ti lb /bin/sh
 docker exec -ti roach-cert /bin/sh
+```
+
+### Copy Client Certificate and Key
+```bash
+docker cp roach-cert:/certs/client/client.root.crt .
+docker cp roach-cert:/certs/client/client.root.key .
+docker cp roach-cert:/certs/client/client.root.key.pk8 .
 ```

example-secure/roach-cert/Dockerfile

@@ -40,26 +40,27 @@ RUN cockroach cert create-ca --certs-dir=/tmp/certs/ca --ca-key=/tmp/safe/ca.key
     && cp -v /tmp/certs/ca/ca.crt /tmp/certs/roach-1 \
     && cp -v /tmp/certs/ca/ca.crt /tmp/certs/roach-2
 
-RUN cockroach cert create-client root --certs-dir=/tmp/certs/client --ca-key=/tmp/safe/ca.key
+RUN cockroach cert create-client root --certs-dir=/tmp/certs/client --ca-key=/tmp/safe/ca.key --also-generate-pkcs8-key
 
 RUN cp -v /tmp/certs/client/client.* /tmp/certs/roach-0 \
     && cp -v /tmp/certs/client/client.* /tmp/certs/roach-1 \
     && cp -v /tmp/certs/client/client.* /tmp/certs/roach-2
 
-RUN cockroach cert create-node roach-0 --certs-dir=/tmp/certs/roach-0 --ca-key=/tmp/safe/ca.key
-RUN cockroach cert create-node roach-1 --certs-dir=/tmp/certs/roach-1 --ca-key=/tmp/safe/ca.key
-RUN cockroach cert create-node roach-2 --certs-dir=/tmp/certs/roach-2 --ca-key=/tmp/safe/ca.key
+RUN cockroach cert create-node roach-0 localhost lb --certs-dir=/tmp/certs/roach-0 --ca-key=/tmp/safe/ca.key
+RUN cockroach cert create-node roach-1 localhost lb --certs-dir=/tmp/certs/roach-1 --ca-key=/tmp/safe/ca.key
+RUN cockroach cert create-node roach-2 localhost lb --certs-dir=/tmp/certs/roach-2 --ca-key=/tmp/safe/ca.key
 
 # Stage 2 - share certs
 
 FROM alpine:latest
 
 LABEL maintainer="[email protected]"
 
-RUN mkdir -pv /certs/roach-0 /certs/roach-1 /certs/roach-2
+RUN mkdir -pv /certs/roach-0 /certs/roach-1 /certs/roach-2 /certs/client
 
 COPY --from=generator  /tmp/certs/roach-0/* /certs/roach-0/
 COPY --from=generator  /tmp/certs/roach-1/* /certs/roach-1/
 COPY --from=generator  /tmp/certs/roach-2/* /certs/roach-2/
+COPY --from=generator  /tmp/certs/client/* /certs/client/
 
 CMD tail -f /dev/null