Merge pull request #215 from CodeNow/new-swarm-certs

update cert with hardcoded altname for alpha-api-old and beta-services

Author: anandkumarpatel

ansible/roles/docker_client/files/certs/swarm-manager/cert.pem

@@ -1,21 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDaDCCAlCgAwIBAgIJAJ3gObWAsIjjMA0GCSqGSIb3DQEBCwUAMIGQMQswCQYD
+MIIDdDCCAlygAwIBAgIJANhn+uKF47iLMA0GCSqGSIb3DQEBCwUAMIGQMQswCQYD
 VQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5j
 aXNjbzERMA8GA1UEChMIUnVubmFibGUxDDAKBgNVBAsTA09wczESMBAGA1UEAxMJ
 bG9jYWxob3N0MR8wHQYJKoZIhvcNAQkBFhBvcHNAcnVubmFibGUuY29tMB4XDTE1
-MTAxMzE5MTI1NVoXDTE2MTAxMjE5MTI1NVowETEPMA0GA1UEAxMGY2xpZW50MIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnIwOEiaAiqxsv7ixToFnzHq
-0Xc4biOgx8tvEYpv0lOXCg4s7n2AS4zqQyNaWze05v/tfghLTEj2j+dFIzkLk3fN
-pmSKu0Jr6xhh1QkyoWsZ20yIgMya9T1P9/8kslqLQ263w5hsG2/z84+Aj6Ku9LYt
-pqda0lpYqXEyeh2XnyzKouP5Qcd8/e1X8mLdZt8pDkaQ4WiG2w3TQ8rbX/7ulNBX
-9PWwzS6FtYA7SeaE9OgwwK6gQLSw60A/kZE+0eLNXoIjxuIICoV69S6jI/Jztbbr
-KKoh76oTa935sAT5KcHnJh5I8rFc+BIkZrz4e3bIyQJu2nXEqBTCjtfK9HYYvQID
-AQABo0MwQTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwIAYDVR0RBBkw
-F4cEChQBO4cEfwAAAYIJbG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQAUk7w/
-NtuaHmVDMKvm5lw1ow8AREzcZ3hlyugbBT8MXoMKbnPuAKqfhfwGQNn7LnXdHD1x
-Q/6ZbAuI+Q/Cf2KRwTvRslJ1ca5UEZb+t8w+LSU/loSpl3YTDJSCS12ef/W9Ln3S
-UiRVskLTbIUXhZ7I+1cjO+52lWw9aYfU/PT7xs6wUIkmZ2AHg2o5odeyLGvwcMPW
-VHpcfc9WYfgJhRXw4lPB7Hey+q/G+Y4y3yvxC57pDC/yQtvDGiLdIK7TbVfJh5DA
-oT/T5hzx/T1YnFEjjU41+8hGwrrPTavrz5ss87jcHB5k2vS3x/nBbunNhqE3sayj
-4r5bzTYODEuNbbvS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 -----END CERTIFICATE-----

ansible/roles/docker_client/files/certs/swarm-manager/key.pem

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAxnIwOEiaAiqxsv7ixToFnzHq0Xc4biOgx8tvEYpv0lOXCg4s
-7n2AS4zqQyNaWze05v/tfghLTEj2j+dFIzkLk3fNpmSKu0Jr6xhh1QkyoWsZ20yI
-gMya9T1P9/8kslqLQ263w5hsG2/z84+Aj6Ku9LYtpqda0lpYqXEyeh2XnyzKouP5
-Qcd8/e1X8mLdZt8pDkaQ4WiG2w3TQ8rbX/7ulNBX9PWwzS6FtYA7SeaE9OgwwK6g
-QLSw60A/kZE+0eLNXoIjxuIICoV69S6jI/JztbbrKKoh76oTa935sAT5KcHnJh5I
-8rFc+BIkZrz4e3bIyQJu2nXEqBTCjtfK9HYYvQIDAQABAoIBAQCyvWULPPFipDvc
-AlIU3Nb1dYuQUXbFVVfavTR0MyHW6q1vRCdaRDYLVogmIrCe2oUZT0kFLMlNk6Zp
-JSCTwizYDZ9wkLyYQBJd9V8g+CDfXU0zxjJo+GFWJHxj3i6aao1nFlF0XlR5PhQX
-u5hLR3eYOILTyYc3UmLrc2bIsODBX4soU993Aq/ME2I8A6S5wSboPTkuiSboC7rD
-4Z3V0eOdljSubMXKoc4v/4A6v2bbe8BLvemL4wTX7TSdTzdU+cpePhPpd0P+/UbI
-tQptLR4JkvO05G7bhfsqGyurbLrwsnFOvqk96PCZjNLkYauWjoyNCw9ar4ScHIne
-/gdRTc5BAoGBAO2e4lr9QsMUMKyPqbiMD3NQZI2w4Hau7QTvayXkB711nwHQhRQd
-uh8EXKE2ODUUhL03J83zFKSarT23hLSqE+JHs8zCVImC6hUlgVA3m5lQB53DX36y
-O1C1DdV8vrRIoIc+85mqtspK7545yPRMnT5erS0GTv+EhmLNDT6zhu8NAoGBANXL
-nBokQqNFeCMf10BjPrIdSwO06rG7dDjHf44/Mcoem6c65OZCH9nFakqjP+f6pCHP
-uw7ASgGSldLnMdjJPz3ERPuEO7Hk71RrqDFeN+H6t2TH2IyX1uByeuxaIYV2QpCE
-rmqnALUXaFY7FsEw0FMMbcsXVqgDouMu1331O+RxAoGBAK7KQRdNVN7K60MEKoRm
-AreAW3cetP6YjiEjPF4S7t6etuhOypWRiGdoffrYN2BUR5AoEk+cj4LFhMnxRNzg
-ft/kfo4QJL9CXY5QmF65iOutwux52rUHxjoH9LUlneJfyjWySN6whOUpWjm5p+iM
-st4+JoUILvQmN/RVgXit9oPBAoGAVGMFvpvJYcCt5s9Omy+RM6S0U0Y5zOV8vlyg
-UHlJIcprDdsFNo2rHL37cnJ1aw9XcbEY2H21uGEvmgt/dV4aBDtQLybGmTUP8nZ7
-8OCLljrr4G+xXe0g9364XkpFKPTA2WJFpfs9ID2ZBVBVbvPhhqZFQAB6R98HkDyQ
-+jqt5UECgYA4GSlK6ij+Xr9NDeIfG8xfuy6aUU792AaYcz7suQXkEUN6Q6PJe+b4
-BHd/ieUWSdl0bkD8ENzZ0GM7nCLxy4DZMNy1Pio2rEJn7M0ljATJbpmdrd1R/EPY
-0R/Tb5T0do+ARehLymgCTkTrqCF48gkYUuHeqw+ywQ2BGktnHwFUyw==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 -----END RSA PRIVATE KEY-----

ansible/roles/docker_client/scripts/genClientCert.sh

@@ -6,10 +6,11 @@ if [[ $1 = '' ]]; then
 fi
 CLIENT=./files/certs/$1
 
-if [[ $2 = '' ]]; then
-  echo 'script requires a client ip address'
-  exit 1
-fi
+echo 'WARN: hard coded alpha-api-old gamma-services and beta-services for SWARM'
+# if [[ $2 = '' ]]; then
+#   echo 'script requires a client ip address'
+#   exit 1
+# fi
 
 mkdir $CLIENT
 
@@ -27,7 +28,7 @@ openssl req \
 chmod 400 "$CLIENT/client.csr"
 
 echo extendedKeyUsage=clientAuth,serverAuth > "$CLIENT/extfile.cnf"
-echo subjectAltName=IP:$2,IP:127.0.0.1,DNS:localhost >> "$CLIENT/extfile.cnf"
+echo subjectAltName=IP:10.4.6.251,IP:10.20.1.59,IP:10.0.1.239,IP:127.0.0.1,DNS:localhost >> "$CLIENT/extfile.cnf"
 
 # generate cert for client
 openssl x509 \