X.509

Using x509-Backup and Sync all Apps/pipelines with run job"

Using x509-Backup, backup, and sync all apps/pipelines with a run job

Using x509, backup and sync all apps and pipelines with a run job.

1. Please follow below repo to configuring x509

   https://github.com/OpsMx/x509-gate

2. Create Secret with the certs

   kubectl create secret generic x509-certs --from-file=tls.key --from-file=tls.crt -n <NAME SPACE>

3. If required, add an annotation for gate ingress.

   nginx.ingress.kubernetes.io/ssl-passthrough: true

4. Edit spin-cli-config-secret.yaml and provide spin-cli configuration

   vi config/spin-cli-config-secret-x509.yaml

   • Config reference is located in spin-cli

auth:
  enabled: true
  x509:
    certPath: /opt/tls.crt
    keyPath: /opt/tls.key 
gate:
  endpoint: https://spin-x509.< NAMESPACE >:8085

• Apply the secret yaml

  kubectl apply -f config/spin-cli-config-secret-x509.yaml -n <NameSpace of spinnaker>

5. Jobs

Environmental variables:

• Command decides upload and download from git

• Application (specific app is defined, For all Application action make value as empty)

• Sync to git from spinnaker

  kubectl create -f jobs/syntogit.yaml -n <NameSpace of spinnaker>

  • Follow the pod logs to see the console output

• Sync to spinnaker from git

  kubectl create -f jobs/synctospinnaker.yaml -n <NameSpace of spinnaker>

  • Follow the pod logs to see the console output