This PS adds a script to regenerate all certificates used in the Airsloop, Seaworthy, Seaworthy-virt sites. And actually updates all the certificates by regenerating them with the new script. Change-Id: I23c09796932b065cd3413362461c6065a1643962 Signed-off-by: Sergiy Markin <smarkin@mirantis.com>
30 lines
655 B
Bash
Executable File
30 lines
655 B
Bash
Executable File
#!/bin/bash
|
|
|
|
# This script regenerates and updates certificate YAML files
|
|
# Usage: ./update_certificates.sh <site_name>
|
|
|
|
set -e # Exit on error
|
|
|
|
# Check for required parameters
|
|
if [ $# -ne 1 ]; then
|
|
echo "Usage: $0 <site_name>"
|
|
echo "Example: $0 airsloop"
|
|
exit 1
|
|
fi
|
|
|
|
SITE_NAME="$1"
|
|
|
|
|
|
|
|
mkdir collected_certs
|
|
|
|
sudo tools/airship pegleg site -r . secrets generate certificates ${SITE_NAME} --save-location collected_certs --regenerate-all --days 825
|
|
|
|
sudo tools/airship pegleg site -r . secrets decrypt ${SITE_NAME} --path collected_certs --overwrite
|
|
|
|
sudo chown -R ${USER} collected_certs
|
|
|
|
cp -a collected_certs/* ./
|
|
|
|
rm -rf collected_certs/
|