update cert with hardcoded altname for alpha-api-old and beta-services

Author: anandkumarpatel

ansible/roles/docker_client/files/certs/swarm-manager/cert.pem

@@ -1,21 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDaDCCAlCgAwIBAgIJAJ3gObWAsIjjMA0GCSqGSIb3DQEBCwUAMIGQMQswCQYD
+MIIDbjCCAlagAwIBAgIJAI8POKqaGXxeMA0GCSqGSIb3DQEBCwUAMIGQMQswCQYD
 VQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5j
 aXNjbzERMA8GA1UEChMIUnVubmFibGUxDDAKBgNVBAsTA09wczESMBAGA1UEAxMJ
 bG9jYWxob3N0MR8wHQYJKoZIhvcNAQkBFhBvcHNAcnVubmFibGUuY29tMB4XDTE1
-MTAxMzE5MTI1NVoXDTE2MTAxMjE5MTI1NVowETEPMA0GA1UEAxMGY2xpZW50MIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnIwOEiaAiqxsv7ixToFnzHq
-0Xc4biOgx8tvEYpv0lOXCg4s7n2AS4zqQyNaWze05v/tfghLTEj2j+dFIzkLk3fN
-pmSKu0Jr6xhh1QkyoWsZ20yIgMya9T1P9/8kslqLQ263w5hsG2/z84+Aj6Ku9LYt
-pqda0lpYqXEyeh2XnyzKouP5Qcd8/e1X8mLdZt8pDkaQ4WiG2w3TQ8rbX/7ulNBX
-9PWwzS6FtYA7SeaE9OgwwK6gQLSw60A/kZE+0eLNXoIjxuIICoV69S6jI/Jztbbr
-KKoh76oTa935sAT5KcHnJh5I8rFc+BIkZrz4e3bIyQJu2nXEqBTCjtfK9HYYvQID
-AQABo0MwQTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwIAYDVR0RBBkw
-F4cEChQBO4cEfwAAAYIJbG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQAUk7w/
-NtuaHmVDMKvm5lw1ow8AREzcZ3hlyugbBT8MXoMKbnPuAKqfhfwGQNn7LnXdHD1x
-Q/6ZbAuI+Q/Cf2KRwTvRslJ1ca5UEZb+t8w+LSU/loSpl3YTDJSCS12ef/W9Ln3S
-UiRVskLTbIUXhZ7I+1cjO+52lWw9aYfU/PT7xs6wUIkmZ2AHg2o5odeyLGvwcMPW
-VHpcfc9WYfgJhRXw4lPB7Hey+q/G+Y4y3yvxC57pDC/yQtvDGiLdIK7TbVfJh5DA
-oT/T5hzx/T1YnFEjjU41+8hGwrrPTavrz5ss87jcHB5k2vS3x/nBbunNhqE3sayj
-4r5bzTYODEuNbbvS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 -----END CERTIFICATE-----

ansible/roles/docker_client/files/certs/swarm-manager/key.pem

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAxnIwOEiaAiqxsv7ixToFnzHq0Xc4biOgx8tvEYpv0lOXCg4s
-7n2AS4zqQyNaWze05v/tfghLTEj2j+dFIzkLk3fNpmSKu0Jr6xhh1QkyoWsZ20yI
-gMya9T1P9/8kslqLQ263w5hsG2/z84+Aj6Ku9LYtpqda0lpYqXEyeh2XnyzKouP5
-Qcd8/e1X8mLdZt8pDkaQ4WiG2w3TQ8rbX/7ulNBX9PWwzS6FtYA7SeaE9OgwwK6g
-QLSw60A/kZE+0eLNXoIjxuIICoV69S6jI/JztbbrKKoh76oTa935sAT5KcHnJh5I
-8rFc+BIkZrz4e3bIyQJu2nXEqBTCjtfK9HYYvQIDAQABAoIBAQCyvWULPPFipDvc
-AlIU3Nb1dYuQUXbFVVfavTR0MyHW6q1vRCdaRDYLVogmIrCe2oUZT0kFLMlNk6Zp
-JSCTwizYDZ9wkLyYQBJd9V8g+CDfXU0zxjJo+GFWJHxj3i6aao1nFlF0XlR5PhQX
-u5hLR3eYOILTyYc3UmLrc2bIsODBX4soU993Aq/ME2I8A6S5wSboPTkuiSboC7rD
-4Z3V0eOdljSubMXKoc4v/4A6v2bbe8BLvemL4wTX7TSdTzdU+cpePhPpd0P+/UbI
-tQptLR4JkvO05G7bhfsqGyurbLrwsnFOvqk96PCZjNLkYauWjoyNCw9ar4ScHIne
-/gdRTc5BAoGBAO2e4lr9QsMUMKyPqbiMD3NQZI2w4Hau7QTvayXkB711nwHQhRQd
-uh8EXKE2ODUUhL03J83zFKSarT23hLSqE+JHs8zCVImC6hUlgVA3m5lQB53DX36y
-O1C1DdV8vrRIoIc+85mqtspK7545yPRMnT5erS0GTv+EhmLNDT6zhu8NAoGBANXL
-nBokQqNFeCMf10BjPrIdSwO06rG7dDjHf44/Mcoem6c65OZCH9nFakqjP+f6pCHP
-uw7ASgGSldLnMdjJPz3ERPuEO7Hk71RrqDFeN+H6t2TH2IyX1uByeuxaIYV2QpCE
-rmqnALUXaFY7FsEw0FMMbcsXVqgDouMu1331O+RxAoGBAK7KQRdNVN7K60MEKoRm
-AreAW3cetP6YjiEjPF4S7t6etuhOypWRiGdoffrYN2BUR5AoEk+cj4LFhMnxRNzg
-ft/kfo4QJL9CXY5QmF65iOutwux52rUHxjoH9LUlneJfyjWySN6whOUpWjm5p+iM
-st4+JoUILvQmN/RVgXit9oPBAoGAVGMFvpvJYcCt5s9Omy+RM6S0U0Y5zOV8vlyg
-UHlJIcprDdsFNo2rHL37cnJ1aw9XcbEY2H21uGEvmgt/dV4aBDtQLybGmTUP8nZ7
-8OCLljrr4G+xXe0g9364XkpFKPTA2WJFpfs9ID2ZBVBVbvPhhqZFQAB6R98HkDyQ
-+jqt5UECgYA4GSlK6ij+Xr9NDeIfG8xfuy6aUU792AaYcz7suQXkEUN6Q6PJe+b4
-BHd/ieUWSdl0bkD8ENzZ0GM7nCLxy4DZMNy1Pio2rEJn7M0ljATJbpmdrd1R/EPY
-0R/Tb5T0do+ARehLymgCTkTrqCF48gkYUuHeqw+ywQ2BGktnHwFUyw==
+MIIEpAIBAAKCAQEAv0miC/fPLmx/Ij/m7A03UAIEJg9Cls3ClmDYAypthj1gPp5e
+oEZj52ZyAG4Gwn4x72R9Q4TcMdq8Qg4f3TZ1ES8a5zZUrhisl7h1q935z7vg7a2R
+9TzOhJ/Wz7epdws44GUHZrzT+a6tskRU92Jmh9oca5KI/QUDvanHWF+Kg2SmjjC8
+OCRFo8uvnaPUkZb0R7X1pN4Q2OYjv0aDb8dKx0K9YzvqZ/7DYp5VkWUcR+17czA7
+E/yw9/rXKGTuEmB+Rc8uJIKyokR4IoADV+fTz6xjMSuJJKJYX+7aYRh95tUgRnEx
+Vb+D1dqsI8mSM057FjB4I6mLXO5xl6yk76p2XQIDAQABAoIBACHQYV3eO3iIY1zp
+kOePWoTBJnyX2/yOeOReUDEXEe9V8CqBklagus5P9L0Qtg8xgaBA0kfaN5Z0hSzk
+FEvlcYJNImNW3lc8M15KlDqCbcOEAbniIdgJHLSjELT9UW6ixDYehdVqccpET54g
+qChm85r2OmnlqGOZvFSNq5h6oyCgnn4O9Yv0LU8+CF7FndFrgMuvnVdoVgSV70uk
+8kwC5QfZ6FEXxC22Mvznm1qplZWHNGClAoGEM2flGqBadi6zWaMtmSzvrQUw8Js8
+KMXsdICDTF0M5Nxs4MwIdtKsemsaESXnG1ov1qqqkxx+ckthGgEhdKyK73J0YKyN
+fjAfSX0CgYEA9xt1hFEwel2TXdZCxR89ItPHYDEZ/pb9mRlIEilvoVPGcW303Had
+/1npyNgLBtdOll936oKPmgLD0Jv98KCQLTIGClri8hnUu7vg2VHWiIMcuXmPJVlO
+Ua4cvC6Sr7J96lWgxfR7eYOr9Gjt9YCsr9Urt1kZMQTCxdfVhmUjbE8CgYEAxivr
+uy+BMLynvmomYNpsVMY8eh334XIaqVQ/8N3tZNgH3G6MCXf3PAsfc657M9f5vWpP
+yj9iaxTCS3uP4Xcr8p7oFzPIrXzhXa/bsGtKlWo4clrtmak3I8blY+PToYhSm+CW
+wubdALKLZlIxC73km8LgKfQYAorScC0K6/I+K5MCgYAt21ipn2+Bpc/tQA/QCQYN
+aoO7ZCFQz7BsMvbe9/WRWLyg3CjuqMyVUJhD/2O8d0RMP5c/W89OY2j3U5uChil7
+WacpUMiA6S5DUJBfhAJt/vbbrKVV5wbTvZ3zhikOle8sB4v4cHBhkn/csYRHZQOm
+9cZRFiXIpPuIP4+Oi0JRnQKBgQCDgjQOZUkDcb6Ts1fCoFCRtXf+xhJwjss4oYtJ
+Kc1XRbF5y/asdesg8nStzRU/Y0z9MSbAHW4Ph5gkhVwHEJGekWuNsjSzRJM+G+zb
+V2gIXZQV91eDyHKqEFy7/D2+DXxcqx8BOjlhNBskDNk1ZI/n+dvOm4ivbzaVcJ61
+020EdwKBgQD25SyDqvovVNEuASMkLbBuCdOOamLvIC31z3c5EiCBFpJFfN2JG6OF
+ieCe4ejCCb1rVPFoqdpeUWxpsfV9lk5Qd0+JfGmc1vGzJy5SvRO0g1e8SMPjyqYg
+rQBBRvI2FkmTf0USl6TKLC11xKeENkCdtrYJaBWSI43icsph/qixOg==
 -----END RSA PRIVATE KEY-----

ansible/roles/docker_client/scripts/genClientCert.sh

@@ -6,10 +6,11 @@ if [[ $1 = '' ]]; then
 fi
 CLIENT=./files/certs/$1
 
-if [[ $2 = '' ]]; then
-  echo 'script requires a client ip address'
-  exit 1
-fi
+echo 'WARN: hard coded alpha-api-old and beta services for SWARM'
+# if [[ $2 = '' ]]; then
+#   echo 'script requires a client ip address'
+#   exit 1
+# fi
 
 mkdir $CLIENT
 
@@ -27,7 +28,7 @@ openssl req \
 chmod 400 "$CLIENT/client.csr"
 
 echo extendedKeyUsage=clientAuth,serverAuth > "$CLIENT/extfile.cnf"
-echo subjectAltName=IP:$2,IP:127.0.0.1,DNS:localhost >> "$CLIENT/extfile.cnf"
+echo subjectAltName=IP:10.20.1.59,IP:10.0.1.239,IP:127.0.0.1,DNS:localhost >> "$CLIENT/extfile.cnf"
 
 # generate cert for client
 openssl x509 \