App SSL 인증서 적용
# PaaS-TA 배포시
# --vars-store creds.d/paasta-creds.yml 적용
Shell
복사
•
vi paasta-deployment.yml
...
- name: gorouter
release: routing
properties:
router:
enable_ssl: true
tls_pem:
- cert_chain: "((router_ssl.certificate))"
private_key: "((router_ssl.private_key))"
...
Shell
복사
•
vi creds.d/paasta-creds.yml
...
router_ssl:
...
certificate: |
# {dmain}.pem
-----BEGIN CERTIFICATE-----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...
-----END CERTIFICATE-----
# ca.pem
-----BEGIN CERTIFICATE-----
MIIEqzCCA5OgAwIBAgICJxIwDQYJKoZIhvcNAQELBQAwUDELMAkGA1UEBhMCS1Ix
HDAaBgNVBAoME0dvdmVybm1lbnQgb2YgS29yZWExDTALBgNVBAsMBEdQS0kxFDAS
BgNVBAMMC0dQS0lSb290Q0ExMB4XDTExMDkyMjA2MTIyM1oXDTMwMDkyMjA2MTIy
...
-----END CERTIFICATE-----
private_key: |
# {dmain}.key
-----BEGIN PRIVATE KEY-----
MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC6jgR5f6NeN/sk
Q6w/MM00kAxJwtpE73pD0/wJQxNL45lAq1GFQKAeTH/DGVxT6toSDj55J9eL9go3
+/x7X1UkUGc/4gujox80rVEqINxwIdkGsZhR+7WgCjwjPHhpGEgMsisf6zuKd7mr
lrrT05ajpoznhMfrRQx3qdRou8rbOPImkIC2cJlhkIbvlij4xtD/DKyyVpWWWLyK
...
-----END PRIVATE KEY-----
추가 후 재배포
Shell
복사
