mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
Cam OttsandGitHub
1a6fb53271
* progress on controller communication * added yaml encoding/decoding * move dispatch callbacks to be more consistent * update unit tests * small cleaups * Add new datadir to unit tests * fix linter * Was able to use FSM hooks to get configuration updates to show raft state * Send index to prevent older versions from being applied and added leader override * pr comments and added/removed ctrl connections * added error logging * pr comments * spelling and bad log newlines * added delete from the toconnect map and added end case to the background connect * reordered removal from map * added mtx around access. Forgot that was changed to be unsopported.
56 lines
1.8 KiB
YAML
56 lines
1.8 KiB
YAML
v: 3
|
|
|
|
# (required) The certificates, ca chains, and private key used to represent this routers identity
|
|
#
|
|
# If the 'edge" section is enabled and enrollment is run, the files in this section will be written to with the results.
|
|
# The "key" value can be provided through any of the support private key engines (file, etc.).
|
|
#
|
|
# If the 'key' value is a file and that file exists; it is expected to a pre-generated private key. It will be used for
|
|
# the enrollment process and it will back the certificates generated during enrollment. If the file does not exist, it
|
|
# will be generated.
|
|
#
|
|
# The 'cert', 'server_cert', and 'ca' files will be overwritten with the results of the enrollment process.
|
|
#
|
|
# When running the ziti-router the files/values in this section will be read and used. The 'cert' value will be used
|
|
# as the client certificate to connect to the controller. The 'server_cert' is used for all servers/listeners. The
|
|
# 'ca' value is used to populate an internally Trusted CA pool.
|
|
identity:
|
|
cert: testdata/router/002-client.cert.pem
|
|
server_cert: testdata/router/002-server.cert.pem
|
|
key: testdata/router/002.key.pem
|
|
ca: testdata/ca/intermediate/certs/ca-chain.cert.pem
|
|
|
|
ctrl:
|
|
endpoint: tls:127.0.0.1:6363
|
|
dataDir: testdata/router2
|
|
|
|
csr:
|
|
country: US
|
|
province: NC
|
|
locality: Charlotte
|
|
organization: NetFoundry
|
|
organizationalUnit: Ziti
|
|
sans:
|
|
dns:
|
|
- "localhost"
|
|
- "test-network"
|
|
- "test-network.localhost"
|
|
- "ziti-dev-ingress01"
|
|
email:
|
|
- "[email protected]"
|
|
ip:
|
|
- "127.0.0.1"
|
|
uri:
|
|
- "ziti://ziti-dev-router01/made/up/example"
|
|
|
|
dialers:
|
|
- binding: transport
|
|
|
|
link:
|
|
dialers:
|
|
- binding: transport
|
|
listeners:
|
|
- binding: transport
|
|
bind: tls:127.0.0.1:6005
|
|
advertise: tls:127.0.0.1:6005
|