conjurdemos / conjur-intro

Miscellaneous utilities that make it easier to make, manage, and run demos
Apache License 2.0
10 stars 11 forks source link

Add DAP Intro Option for Node Certificate Rotation #88

Closed micahlee closed 3 years ago

micahlee commented 3 years ago

This PR modifies DAP intro in a couple of ways:

Closes #89

To try the new rotation function:

# Provision a Master
bin/dap --provision-master

# Import custom certificates
bin/dap --import-custom-certificates

# Provision Standbys
bin/dap --provision-standbys

# (Optional) Enable Auto-failover
bin/dap --enable-auto-failover

# Provision Follower
bin/dap --provision-follower

# Verify the deployment is working
bin/api --load-policy-and-values
bin/api --fetch-secrets

# Rotate the node certificates
bin/dap --rotate-custom-certificates

# Verify the deployment is still working
bin/api --load-policy-and-values
bin/api --fetch-secrets
micahlee commented 3 years ago

Alright, @h-artzi, this should be ready for another look. Thanks!