🖥️
ExPECA TestbedConfig
  • CHI-at-ExPECA
  • Prepare
    • Networks
    • Storage Node
    • Worker Nodes
    • SDR Nodes
    • Advantech Routers
    • Controller Node
    • Security
  • Deploy
    • Deploy Openstack
    • Set Up Admin Console
    • Post-Deploy Ironic
    • Deploy Monitoring Services
  • Enroll
    • Enroll Worker Nodes
    • Enroll Network Segments
      • Enroll Advantech Routers
      • Enroll SDRs
      • Enroll EP5G
    • Enroll Baremetal Nodes
  • Checks and Tests
    • Services
    • Worker Nodes
    • Software-Defined Radios
    • Kubernetes Cluster
    • Networking
  • Miscellaneous
    • Create a VM for the Controller
    • Update TSL Certificate
    • Access the Database
    • Update k3s Certificates
  • Known Issues
    • During Preparations
    • During Deployment
    • During Resource Enrollment
Powered by GitBook
On this page
Edit on GitHub
  1. Miscellaneous

Update TSL Certificate

Currently, the initial certificate generation is not yet automated. You must perform the following steps:

Make a directory for your certificates

docker exec -it letsencrypt_certbot mkdir -p /www/data/testbed.expeca.proj.kth.se/

Request the initial certificate

docker exec -it letsencrypt_certbot certbot certonly --noninteractive --agree-tos
Saving debug log to /var/log/kolla/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for testbed.expeca.proj.kth.se
Waiting for verification...
Cleaning up challenges

Copy fullchain.pem to site-config/certificates/haproxy.pem.

cd /opt/chi-in-a-box
mkdir -p ../site-config/certificates/
sudo cp /var/lib/docker/volumes/letsencrypt_certs/_data/live/testbed.expeca.proj.kth.se/fullchain.pem ../site-config/certificates/haproxy.pem

Append the private key to ../site-config/certificates/haproxy.pem.

sudo vim /var/lib/docker/volumes/letsencrypt_certs/_data/live/testbed.expeca.proj.kth.se/privkey.pem
vim ../site-config/certificates/haproxy.pem

Reset the necessary services

./cc-ansible deploy --site /opt/site-config --tags letsencrypt,haproxy,horizon
PreviousCreate a VM for the ControllerNextAccess the Database

Last updated 2 years ago