Skip to content

Commit

Permalink
Merge pull request #69 from ibm-client-engineering/adam-updates
Browse files Browse the repository at this point in the history
Adam updates
  • Loading branch information
kramerro-ibm authored Apr 2, 2024
2 parents ab03a31 + 5e58e3d commit d6dd34e
Show file tree
Hide file tree
Showing 3 changed files with 63 additions and 1 deletion.
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -27,3 +27,4 @@ yarn.lock
yarn.lock
assets/scripts/missing_permissions.txt
.gitignore
yarn.lock
60 changes: 60 additions & 0 deletions docs/2-Deployment/2-UPI_Install.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -493,4 +493,64 @@ spec:
requests:
storage: 1Mi
EOF

```

## Change Cluster Domain

### Generate new self-signed certificate

#### Generate CA certs

```
openssl genrsa -out ca.key 2048
openssl req -new -x509 -days 365 -key ca.key -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=Acme Root CA" -out ca.crt
```

#### Generate Server certs

Generate 'server.csr'

```
openssl req -newkey rsa:2048 -nodes -keyout server.key -subj "/C=CN/ST=GD/L=SZ/O=Acme, Inc./CN=*.{BASE_DOMAIN}" -out server.csr
```

Generate 'server.crt'

```
openssl x509 -req -extfile <(printf "subjectAltName=DNS:*.{BASE_DOMAIN}") -days 365 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt
```


#### Update the cluster:

Create the new secret which will contain the cert and key:

```
oc create secret tls custom-cert --cert=server.crt --key=server.key -n openshift-config
```


Update the ingress:

```
oc edit ingresses.config/cluster -o yaml
```

Add the following under 'spec:'

```
componentRoutes:
- hostname: console.{NEW_URL}
name: console
namespace: openshift-console
servingCertKeyPairSecret:
name: custom-cert
- hostname: oauth.{NEW_URL}
name: oauth-openshift
namespace: openshift-authentication
servingCertKeyPairSecret:
name: custom-cert
```
3 changes: 2 additions & 1 deletion yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -9768,4 +9768,5 @@ yocto-queue@^1.0.0:
zwitch@^2.0.0:
version "2.0.4"
resolved "https://registry.npmjs.org/zwitch/-/zwitch-2.0.4.tgz"
integrity sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==
integrity sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==

0 comments on commit d6dd34e

Please sign in to comment.