summaryrefslogtreecommitdiff
path: root/contrib/k8s-emc/_graveyard_/acme-hack/do.sh
diff options
context:
space:
mode:
Diffstat (limited to 'contrib/k8s-emc/_graveyard_/acme-hack/do.sh')
-rwxr-xr-xcontrib/k8s-emc/_graveyard_/acme-hack/do.sh23
1 files changed, 23 insertions, 0 deletions
diff --git a/contrib/k8s-emc/_graveyard_/acme-hack/do.sh b/contrib/k8s-emc/_graveyard_/acme-hack/do.sh
new file mode 100755
index 0000000..3c2b5e3
--- /dev/null
+++ b/contrib/k8s-emc/_graveyard_/acme-hack/do.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+declare -A domains
+domains[emc-live]="emc-live.elev8.at"
+domains[emc-stats]="emc-stats.elev8.at"
+domains[stream-elev8]="stream.elev8.at"
+domains[stream-elevate]="stream.elevate.at"
+
+kubectl apply -f nginx-acme-cm.yml
+kubectl apply -f nginx-acme-deploy.yml
+kubectl apply -f nginx-acme-svc.yml
+for name in "${!domains[@]}"; do
+ cat nginx-acme-ingress.yml | sed "s/<<name>>/$name/g" | sed "s/<<hostname>>/${domains[$name]}/g" | kubectl apply -f -
+done
+
+### TODO: wait for all pods and then contiune the script
+#exit 0
+
+ssh emc-00 systemctl start acmetool
+
+for name in "${!domains[@]}"; do
+ ssh emc-00 kubectl -n emc create secret tls "$name\-tls" "--cert=/var/lib/acme/live/${domains[$name]}/fullchain" "--key=/var/lib/acme/live/${domains[$name]}/privkey" --dry-run -o json | kubectl apply -f -
+done