mirror of
https://github.com/hatchet-dev/hatchet.git
synced 2026-01-06 08:49:53 -06:00
78685d0098
* (wip) encryption * feat: api tokens * chore: add api token generation command * fix: e2e tests * chore: set timeout for e2e job * fix: e2e tests, remove client-side certs * chore: address PR review comments * fix: token tests * chore: address review comments and fix tests
31 lines
1.8 KiB
Bash
31 lines
1.8 KiB
Bash
#!/bin/bash
|
|
# This scripts generates test keys and certificates for the sample.
|
|
|
|
set -eux
|
|
|
|
CERTS_DIR=./certs
|
|
|
|
# Read CERTS_DIR from args if exists
|
|
if [ -n "$1" ]; then
|
|
CERTS_DIR=$1
|
|
fi
|
|
|
|
mkdir -p $CERTS_DIR
|
|
|
|
# Generate a private key and a certificate for a test certificate authority
|
|
openssl genrsa -out $CERTS_DIR/ca.key 4096
|
|
openssl req -new -x509 -key $CERTS_DIR/ca.key -sha256 -subj "/C=US/ST=WA/O=Test CA, Inc." -days 365 -out $CERTS_DIR/ca.cert
|
|
|
|
# Generate a private key and a certificate for cluster
|
|
openssl genrsa -out $CERTS_DIR/cluster.key 4096
|
|
openssl req -new -key $CERTS_DIR/cluster.key -out $CERTS_DIR/cluster.csr -config $CERTS_DIR/cluster-cert.conf
|
|
openssl x509 -req -in $CERTS_DIR/cluster.csr -CA $CERTS_DIR/ca.cert -CAkey $CERTS_DIR/ca.key -CAcreateserial -out $CERTS_DIR/cluster.pem -days 365 -sha256 -extfile $CERTS_DIR/cluster-cert.conf -extensions req_ext
|
|
|
|
# Generate a private key and a certificate for internal admin client
|
|
openssl req -newkey rsa:4096 -nodes -keyout "$CERTS_DIR/client-internal-admin.key" -out "$CERTS_DIR/client-internal-admin.csr" -config $CERTS_DIR/internal-admin-client-cert.conf
|
|
openssl x509 -req -in $CERTS_DIR/client-internal-admin.csr -CA $CERTS_DIR/ca.cert -CAkey $CERTS_DIR/ca.key -CAcreateserial -out $CERTS_DIR/client-internal-admin.pem -days 365 -sha256 -extfile $CERTS_DIR/internal-admin-client-cert.conf -extensions req_ext
|
|
|
|
# Generate a private key and a certificate for worker client
|
|
openssl req -newkey rsa:4096 -nodes -keyout "$CERTS_DIR/client-worker.key" -out "$CERTS_DIR/client-worker.csr" -config $CERTS_DIR/worker-client-cert.conf
|
|
openssl x509 -req -in $CERTS_DIR/client-worker.csr -CA $CERTS_DIR/ca.cert -CAkey $CERTS_DIR/ca.key -CAcreateserial -out $CERTS_DIR/client-worker.pem -days 365 -sha256 -extfile $CERTS_DIR/worker-client-cert.conf -extensions req_ext
|