OPENSHIFT-ADD-CA-BUNDLE - Revision history

Tcepo: /* light code */

2023-04-18T20:35:30Z

light code

← Older revision		Revision as of 22:35, 18 April 2023
Line 7:		Line 7:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	domainVariableName=$(echo ${domainName} \|tr '.' '-' )		domainVariableName=$(echo ${domainName} \|tr '.' '-' )
	~~# Get the certificate chain~~		echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \|openssl x509 -outform PEM \|tee ./${domainVariableName}-ca.crt
	echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| openssl x509 -outform PEM \|tee ./${domainVariableName}-ca.crt
	oc create configmap ${domainVariableName}-ca -n openshift-config \		oc create configmap ${domainVariableName}-ca -n openshift-config \
	--from-file=${domainVariableName}-ca.crt=./${domainVariableName}-ca.crt		--from-file=${domainVariableName}-ca.crt=./${domainVariableName}-ca.crt

Tcepo: /* light code */

2023-04-18T20:34:06Z

light code

← Older revision		Revision as of 22:34, 18 April 2023
Line 10:		Line 10:
	echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| openssl x509 -outform PEM \|tee ./${domainVariableName}-ca.crt		echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| openssl x509 -outform PEM \|tee ./${domainVariableName}-ca.crt
	oc create configmap ${domainVariableName}-ca -n openshift-config \		oc create configmap ${domainVariableName}-ca -n openshift-config \
	--from-file=${~~domainName~~}=./${domainVariableName}-ca.crt		--from-file=${domainVariableName}-ca.crt=./${domainVariableName}-ca.crt
	oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca"}}}'		oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca"}}}'
	</syntaxhighlight>		</syntaxhighlight>

Tcepo: /* light code */

2023-04-18T20:31:36Z

light code

← Older revision		Revision as of 22:31, 18 April 2023
Line 8:		Line 8:
	domainVariableName=$(echo ${domainName} \|tr '.' '-' )		domainVariableName=$(echo ${domainName} \|tr '.' '-' )
	# Get the certificate chain		# Get the certificate chain
	echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| openssl x509 -outform PEM \|tee ${domainVariableName}-ca.crt		echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| openssl x509 -outform PEM \|tee ./${domainVariableName}-ca.crt
	oc create configmap ${domainVariableName}-ca -n openshift-config \		oc create configmap ${domainVariableName}-ca -n openshift-config \
	--from-file=${domainName}=~~$(realpath ~~~/${domainVariableName}-ca.crt )		--from-file=${domainName}=./${domainVariableName}-ca.crt
	oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca"}}}'		oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca"}}}'
	</syntaxhighlight>		</syntaxhighlight>

Tcepo: /* light code */

2023-04-18T18:03:46Z

light code

← Older revision		Revision as of 20:03, 18 April 2023
Line 7:		Line 7:
	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	domainVariableName=$(echo ${domainName} \|tr '.' '-' )		domainVariableName=$(echo ${domainName} \|tr '.' '-' )

	# Get the certificate chain		# Get the certificate chain
	echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| ~~awk '/~~-~~----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/'~~ \|tee ./${domainVariableName}-ca~~-bundle~~.crt		echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| openssl x509 -outform PEM \|tee ${domainVariableName}-ca.crt
	oc create configmap ${domainVariableName}-ca~~-bundle~~ -n openshift-config \		oc create configmap ${domainVariableName}-ca -n openshift-config \
	--from-file=${domainName}=./${domainVariableName}-ca~~-bundle~~.crt		--from-file=${domainName}=$(realpath ~/${domainVariableName}-ca.crt )
	oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca~~-bundle~~"}}}'		oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca"}}}'
	</syntaxhighlight>		</syntaxhighlight>

Tcepo: /* light code */

2023-04-18T10:08:46Z

light code

← Older revision		Revision as of 12:08, 18 April 2023
Line 3:		Line 3:
	#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE		#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE

	domainName=~~console-openshift-console.apps.ocp4-6.infocepo.com~~		domainName=

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
Line 9:		Line 9:

	# Get the certificate chain		# Get the certificate chain
	echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| awk '/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/' \|tee ${domainVariableName}-ca-bundle.crt		echo \| openssl s_client -connect ${domainName}:443 -servername ${domainName} -showcerts 2>/dev/null \| awk '/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/' \|tee ./${domainVariableName}-ca-bundle.crt
	oc create configmap ${domainVariableName}-ca-bundle -n openshift-config \		oc create configmap ${domainVariableName}-ca-bundle -n openshift-config \
	--from-file=${domainName}=~~$(realpath ~~~/${domainVariableName}-ca-bundle.crt )		--from-file=${domainName}=./${domainVariableName}-ca-bundle.crt
	oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca-bundle"}}}'		oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca-bundle"}}}'
	</syntaxhighlight>		</syntaxhighlight>
Line 33:		Line 33:
	-----END CERTIFICATE-----		-----END CERTIFICATE-----
	</syntaxhighlight>		</syntaxhighlight>

	==ynotopec + CHATGPT4==		==ynotopec + CHATGPT4==
	The following script automates the process of fetching the CA bundle, creating a ConfigMap, and updating the cluster-wide proxy configuration in OpenShift. It assumes that you have already logged in to the OpenShift cluster with the oc CLI tool and have the necessary permissions.		The following script automates the process of fetching the CA bundle, creating a ConfigMap, and updating the cluster-wide proxy configuration in OpenShift. It assumes that you have already logged in to the OpenShift cluster with the oc CLI tool and have the necessary permissions.

Tcepo: Undo revision 1465 by Tcepo (talk)

2023-04-18T07:30:15Z

Undo revision 1465 by Tcepo (talk)

← Older revision		Revision as of 09:30, 18 April 2023
Line 1:		Line 1:
	[[File:Untrusted-CA-without-CERTMANAGER.drawio.png~~\|thumb\|right~~]]		[[File:Untrusted-CA-without-CERTMANAGER.drawio.png]]
	==light code==		==light code==
	#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE		#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE

Tcepo at 07:29, 18 April 2023

2023-04-18T07:29:50Z

← Older revision		Revision as of 09:29, 18 April 2023
Line 1:		Line 1:
	[[File:Untrusted-CA-without-CERTMANAGER.drawio.png]]		[[File:Untrusted-CA-without-CERTMANAGER.drawio.png\|thumb\|right]]
	==light code==		==light code==
	#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE		#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE

Tcepo at 07:28, 18 April 2023

2023-04-18T07:28:45Z

@@ Line 1: / Line 1: @@
-ynotopec + CHATGPT4<br>
+[[File:Untrusted-CA-without-CERTMANAGER.drawio.png]]
-<br>
+==light code==
 The following script automates the process of fetching the CA bundle, creating a ConfigMap, and updating the cluster-wide proxy configuration in OpenShift. It assumes that you have already logged in to the OpenShift cluster with the oc CLI tool and have the necessary permissions.
@@ Line 51: / Line 84: @@
 Make sure to replace https://example.com with the URL you want to retrieve the CA bundle from. The script will fetch the CA bundle, create a ConfigMap in the openshift-config namespace, and update the cluster-wide proxy configuration to include the new CA bundle.

Tcepo at 07:21, 18 April 2023

2023-04-18T07:21:33Z

← Older revision		Revision as of 09:21, 18 April 2023
Line 57:		Line 57:
	domainName=console-openshift-console.apps.ocp4-6.infocepo.com		domainName=console-openshift-console.apps.ocp4-6.infocepo.com

	<~~pre~~>		<syntaxhighlight lang="bash">
	domainVariableName=$(echo ${domainName} \|tr '.' '-' )		domainVariableName=$(echo ${domainName} \|tr '.' '-' )

Line 65:		Line 65:
	--from-file=${domainName}=$(realpath ~/${domainVariableName}-ca-bundle.crt )		--from-file=${domainName}=$(realpath ~/${domainVariableName}-ca-bundle.crt )
	oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca-bundle"}}}'		oc patch proxy/cluster --type=merge -p '{"spec":{"trustedCA":{"name":"'${domainVariableName}'-ca-bundle"}}}'
	<~~pre~~>		</syntaxhighlight>

Tcepo at 07:20, 18 April 2023

2023-04-18T07:20:55Z

← Older revision		Revision as of 09:20, 18 April 2023
Line 52:		Line 52:
	Make sure to replace https://example.com with the URL you want to retrieve the CA bundle from. The script will fetch the CA bundle, create a ConfigMap in the openshift-config namespace, and update the cluster-wide proxy configuration to include the new CA bundle.		Make sure to replace https://example.com with the URL you want to retrieve the CA bundle from. The script will fetch the CA bundle, create a ConfigMap in the openshift-config namespace, and update the cluster-wide proxy configuration to include the new CA bundle.

	===To OPENSHIFT (light)===		==To OPENSHIFT (light version)==
	#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE		#https://infocepo.com/wiki/index.php/OPENSHIFT-ADD-CA-BUNDLE