Skip to content

Instantly share code, notes, and snippets.

@eaba
Forked from fauberso/kubernetes-gencerts.sh
Created August 22, 2020 15:05
Show Gist options
  • Save eaba/5e984b33613d99d37128db929ca82f2e to your computer and use it in GitHub Desktop.
Save eaba/5e984b33613d99d37128db929ca82f2e to your computer and use it in GitHub Desktop.
Generates self-signed tls secrets for kubernetes. Run this with e.g. 'kubernetes-gencerts microk8s.local', then install the secrets with 'kubectl apply -f microk8s.local.yaml'
#!/bin/bash
HOSTNAME=${1:-localhost}
openssl req -newkey rsa:2048 -nodes -keyout $HOSTNAME.key -x509 -days 3650 -out $HOSTNAME.crt
echo "apiVersion: v1
kind: Secret
metadata:
name: $HOSTNAME.tls
namespace: default
type: kubernetes.io/tls
data:
tls.crt: `cat $HOSTNAME.crt | base64 -w0`
tls.key: `cat $HOSTNAME.key | base64 -w0`
" > $HOSTNAME.yaml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment