Project

General

Profile

History

The ungleich etcd infrastructure » History » Revision 2

Revision 1 (ll nu, 06/25/2019 02:27 PM) → Revision 2/6 (ll nu, 06/25/2019 02:28 PM) 

h1. The ungleich etcd infrastructure 

 Hey there fellow open/free infrastructure lover, this is a documentation of the ongoing etcd deployment.  

 1 create ca.crt with openssl 
 openssl genrsa -out rootCA.key 4096 

 2 self-sign this certificate. 
 openssl req -x509 -new -nodes -key rootCA.key -sha512 -days 1024 -out rootCA.pem 

 3 create a private key for device 1 
 openssl genrsa -out etcd1.key 2048 

 4 signing request  
 openssl req -new -key etcd1.key -out etcd1.csr 

 5 signing device 1 key 
 openssl x509 -req -in etcd1.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out etcd1.crt -days 1024 -sha512 

 6 copy keys scp 

 7 start test  
 etcd --name infra0 --data-dir infra0 \ 
   --cert-file=/root/keys/etcd1.crt --key-file=/root/keys/etcd1.key \ 
   --advertise-client-urls=https://[2a0a:e5c0:0:2:0:b3ff:fe39:798b]:2379 --listen-client-urls=https://[2a0a:e5c0:0:2:0:b3ff:fe39:798b]:2379 

 to test it: curl --cacert /path/to/ca.crt https://127.0.0.1:2379/v2/keys/foo -XPUT -d value=bar -v