airship/pegleg
Code Issues Proposed changes
770cf4256e
pegleg/doc/source/pki/pki.rst
Ian H. Pittwood 7306c3af9b Move generate-pki under generate sub-command 
Change-Id: I83b078d27eb2c07c3be7eb6543de85ce32fb2a6e
2019-11-20 19:16:12 +00:00

1.6 KiB
Raw Blame History

Public Key Infrastructure (PKI) Catalog

Configuration for certificate and keypair generation in the cluster. The pegleg secrets generate certificates command will read all PKICatalog documents and either find pre-existing certificates/keys, or generate new ones based on the given definition.

Dependencies

Pegleg's PKI Catalog depends on CloudFlare's PKI/TLS toolkit, which is installed as a part of Pegleg's Dockerfile.

Sample Document

Here is a sample document:

../../../site_yamls/site/pki-catalog.yaml

Certificate Authorities

The data in the certificate-authorities key is used to generate certificates for each authority and node.

Each certificate authority requires essential host-specific information for each node.