git mv Ingress ingress

controllers/nginx-third-party/examples/certs.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+
+# Copyright 2015 The Kubernetes Authors All rights reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+# This test is for dev purposes.
+
+set -e
+
+SECRET_NAME=${SECRET_NAME:-ssl-secret}
+# Name of the app in the .yaml
+APP=${APP:-nginxsni}
+# SNI hostnames
+HOSTS=${HOSTS:-foo.bar.com}
+# Should the test build and push the container via make push?
+PUSH=${PUSH:-false}
+
+# makeCerts makes certificates applying the given hostnames as CNAMEs
+# $1 Name of the app that will use this secret, applied as a app= label
+# $2... hostnames as described below
+# Eg: makeCerts nginxsni nginx1 nginx2 nginx3
+# Will generate nginx{1,2,3}.crt,.key,.json file in cwd. It's upto the caller
+# to execute kubectl -f on the json file. The secret will have a label of
+# app=nginxsni, so you can delete it via the cleanup function.
+function makeCerts {
+    local label=$1
+    shift
+    for h in ${@}; do
+        if [ ! -f $h.json ] || [ ! -f $h.crt ] || [ ! -f $h.key ]; then
+            printf "\nCreating new secrets for $h, will take ~30s\n\n"
+            local cert=$h.crt key=$h.key host=$h secret=$h.json cname=$h
+            if [ $h == "wildcard" ]; then
+                cname=*.$h.com
+            fi
+
+            # Generate crt and key
+            openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
+                    -keyout "${key}" -out "${cert}" -subj "/CN=${cname}/O=${cname}"
+        fi
+
+        cat <<EOF > secret-$SECRET_NAME-$h.json
+{
+    "kind": "Secret",
+    "apiVersion": "v1",
+    "metadata": {
+        "name": "$SECRET_NAME"
+    },
+    "data": {
+        "$h.crt": "$(cat ./$h.crt | base64)",
+        "$h.key": "$(cat ./$h.key | base64)"
+    }
+}
+
+EOF
+
+    done
+}
+
+makeCerts ${APP} ${HOSTS[*]}