Minimal Shell Operator example. #3
Draft
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Zsh was unhappy with this copypasta Bash.
We now have a working Step Operator from the Quick Start.
Now that we filter by label, we can work with secrets.
We're going to have a real certificate now. Not a serious one, but I don't want to trigger any secret scanners.
Renewal within Kubernetes cluster now works. Going to reoganize to preserve the debugging functions as commands according to the `README` I've begun to write.
Create a common library with different executables for debugging.
Since it all needs to be in `/hooks/`.
flatheadmill
force-pushed
the
topic/first-draft
branch
from
4492459 to
207c89a
Compare
flatheadmill
force-pushed
the
topic/first-draft
branch
from
519a3cf to
46f8fe4
Compare
Can't remember if `step-renewer` is per namespace or cluster wide at the moment, but the gist of it is a shell program (or similar) with a shebang line.
When working with OpenSearch I need to create an api certificate, a certificate for a transport layer and client certificate for administration of the cluster. These are all kept in the same secret so they can be mounted in a directory next to each other. Further more, the keys need be in PKCS#8 format. Added an annotation for a colon separated list of key pairs in secret. The pairs are slash delimited. Shouldn't be the case that someone needs a slash or a colon in their key name so I'm not going to add escaping for the delimiters. The pair can contain a third part which is the key type either `pkcs8` or `pem`, but I'm not sure if `pem` is the right name for the default format. If no pair string is provided it assumed to be `"tls.crt/tls.key/pem"`.
You are only allowed one slash, so we placed our qualifier in hostname part.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
No description provided.