~damien/infrastructure

59ce17b5364ca2a5706385487ddd0189d7162f3c — Damien Radtke 9 months ago 39fd996
Update readme
1 files changed, 1 insertions(+), 9 deletions(-)

M README.md
M README.md => README.md +1 -9
@@ 36,15 36,7 @@ OpenSSL will prompt you for a passphrase, and then you should see `nomad.p12` in

## Issuing Certificates

Nodes are provisioned with and run the `issue-cert.sh` script for certificates,
which uses a CFSSL remote. When on the support server, instead you can do:

```bash
$ cd ~
$ RESPONSE=$(echo '{}' | sudo `which cfssl` gencert -config /etc/ssl/cfssl.json -ca /etc/ssl/nomad/ca.pem -ca-key /etc/ssl/nomad/ca-key.pem -)
$ echo "${RESPONSE}" | jq -r .cert > nomad-cli.pem; chmod 0444 nomad-cli.pem
$ echo "${RESPONSE}" | jq -r .key > nomad-cli-key.pem; chmod 0400 nomad-cli-key.pem
```
Use the `issue-cert` script from tools.

## Querying the raw Consul API