openstack-helm/helm-toolkit/utils/secret-generator/README.md
Pete Birley 116931bb51 Rename common chart, and update all references to functions within it. (#167)
* Rename common chart to helm-toolkit

* Update useage of helpers to include reference to chart they come from.

* Update helm-toolkit function naming

Also catches several functions missed in previous PS

* Update remaining requirements.yaml to use helm-toolbox

* Dep Check container fix for common -> helm-toolbox renaming
2017-02-14 16:52:38 -08:00

1.8 KiB

Ceph Kubernetes Secret Generation

This script will generate ceph keyrings and configs as Kubernetes secrets.

Sigil is required for template handling and must be installed in system PATH. Instructions can be found here: https://github.com/gliderlabs/sigil

The following functions are provided:

Generate raw FSID (can be used for other functions)

./generate_secrets.sh fsid

Generate raw ceph.conf (For verification)

./generate_secrets.sh ceph-conf-raw <fsid> "overridekey=value"

Take a look at ceph/ceph.conf.tmpl for the default values

Generate encoded ceph.conf secret

./generate_secrets.sh ceph-conf <fsid> "overridekey=value"

Generate encoded admin keyring secret

./generate_secrets.sh admin-keyring

Generate encoded mon keyring secret

./generate_secrets.sh mon-keyring

Generate a combined secret

Contains ceph.conf, admin keyring and mon keyring. Useful for generating the /etc/ceph directory

./generate_secrets.sh combined-conf

Generate encoded boostrap keyring secret

./generate_secrets.sh bootstrap-keyring <osd|mds|rgw>

Kubernetes workflow

./generator/generate_secrets.sh all `./generate_secrets.sh fsid`

kubectl create secret generic ceph-conf-combined --from-file=ceph.conf --from-file=ceph.client.admin.keyring --from-file=ceph.mon.keyring --namespace=ceph
kubectl create secret generic ceph-bootstrap-rgw-keyring --from-file=ceph.keyring=ceph.rgw.keyring --namespace=ceph
kubectl create secret generic ceph-bootstrap-mds-keyring --from-file=ceph.keyring=ceph.mds.keyring --namespace=ceph
kubectl create secret generic ceph-bootstrap-osd-keyring --from-file=ceph.keyring=ceph.osd.keyring --namespace=ceph
kubectl create secret generic ceph-client-key --from-file=ceph-client-key --namespace=ceph