mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
Paul Lorenz
fef5327e14
* Allow configuring endpoints file full path instead of directory. Fixes #2724 * Write initial router endpoints file based on ctrls in JWT. Fixes #2728 * Add ctrls property to non-ha router enrollment. Fixes #2108 * Enrollment doesn't contain controller which created the enrollment. Fixes #2729
30 lines
1.6 KiB
Bash
Executable File
30 lines
1.6 KiB
Bash
Executable File
# Create the trust root, a self-signed CA
|
|
ziti pki create ca --trust-domain ha.test --pki-root ./pki --ca-file ca --ca-name 'HA Example Trust Root'
|
|
|
|
# Create the controller 1 intermediate/signing cert
|
|
ziti pki create intermediate --pki-root ./pki --ca-name ca --intermediate-file ctrl1 --intermediate-name 'Controller One Signing Cert'
|
|
|
|
# Create the controller 1 server cert
|
|
ziti pki create server --pki-root ./pki --ca-name ctrl1 --dns localhost --ip 127.0.0.1 --server-name ctrl1 --spiffe-id 'controller/ctrl1'
|
|
|
|
# Create the controller 1 server cert
|
|
ziti pki create client --pki-root ./pki --ca-name ctrl1 --client-name ctrl1 --spiffe-id 'controller/ctrl1'
|
|
|
|
# Create the controller 2 intermediate/signing cert
|
|
ziti pki create intermediate --pki-root ./pki --ca-name ca --intermediate-file ctrl2 --intermediate-name 'Controller Two Signing Cert'
|
|
|
|
# Create the controller 2 server cert
|
|
ziti pki create server --pki-root ./pki --ca-name ctrl2 --dns localhost --ip 127.0.0.1 --server-name ctrl2 --spiffe-id 'controller/ctrl2'
|
|
|
|
# Create the controller 2 client cert
|
|
ziti pki create client --pki-root ./pki --ca-name ctrl2 --client-name ctrl2 --spiffe-id 'controller/ctrl2'
|
|
|
|
# Create the controller 3 intermediate/signing cert
|
|
ziti pki create intermediate --pki-root ./pki --ca-name ca --intermediate-file ctrl3 --intermediate-name 'Controller Three Signing Cert'
|
|
|
|
# Create the controller 3 server cert
|
|
ziti pki create server --pki-root ./pki --ca-name ctrl3 --dns localhost --ip 127.0.0.1 --server-name ctrl3 --spiffe-id 'controller/ctrl3'
|
|
|
|
# Create the controller 3 client cert
|
|
ziti pki create client --pki-root ./pki --ca-name ctrl3 --client-name ctrl3 --spiffe-id 'controller/ctrl3'
|