ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

workflows/use-renew-ssl-certs.yml: update

Browse Source
This commit is contained in:
Haitao Pan 2024-01-04 15:26:21 +08:00
parent ead4cacafb
commit dbe614f9c3
1 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
.github/workflows/use-renew-ssl-certs.yml vendored
View File

@ -82,11 +82,15 @@ jobs:
# Write Certificate and Private Key to Vault
vault login ${VAULT_TOKEN}
vault secrets enable -path=${CERT_PATH} pki || true
vault write ${CERT_PATH} \
common_name=${DOMAIN} \
ttl=720h \
max_ttl=1680h \
certificate=@/etc/ssl/${DOMAIN}.pem \
vault secrets disable pki
vault secrets destroy pki
vault secrets enable pki
vault secrets tune -max-lease-ttl=1680h pki
vault secrets enable -path=pki pki || true
vault write pki/roles/${DOMAIN} allowed_domains=${DOMAIN} allow_subdomains=true max_ttl=720h
vault write pki/issue/${DOMAIN} common_name=${DOMAIN} \
ttl=720h \
max_ttl=1680h \
certificate=@/etc/ssl/${DOMAIN}.pem \
private_key=@/etc/ssl/${DOMAIN}.key
echo "Certificate and private key written to Vault at path: ${CERT_PATH}"