forked from wazuh/wazuh-docker
fix entrypoint for certs builder
This commit is contained in:
@@ -28,13 +28,19 @@ else
|
|||||||
exit 1
|
exit 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
cp /certificates/certs.yml /config.yml
|
||||||
|
|
||||||
chmod 700 /$CERT_TOOL
|
chmod 700 /$CERT_TOOL
|
||||||
|
|
||||||
##############################################################################
|
##############################################################################
|
||||||
# Creating Cluster certificates
|
# Creating Cluster certificates
|
||||||
##############################################################################
|
##############################################################################
|
||||||
|
|
||||||
/$CERT_TOOL -A
|
## Execute cert tool and parsin cert.yml to set UID permissions
|
||||||
|
source /$CERT_TOOL -A
|
||||||
|
nodes_server=$( cert_parseYaml /config.yml | grep nodes_server_name | sed 's/nodes_server_name=//' )
|
||||||
|
arr=($nodes_server)
|
||||||
|
|
||||||
echo "Moving created certificates to destination directory"
|
echo "Moving created certificates to destination directory"
|
||||||
cp /wazuh-certificates/* /certificates/
|
cp /wazuh-certificates/* /certificates/
|
||||||
echo "changing certificate permissions"
|
echo "changing certificate permissions"
|
||||||
@@ -48,11 +54,6 @@ cp /certificates/root-ca.key /certificates/root-ca-manager.key
|
|||||||
chown 999:997 /certificates/root-ca-manager.pem
|
chown 999:997 /certificates/root-ca-manager.pem
|
||||||
chown 999:997 /certificates/root-ca-manager.key
|
chown 999:997 /certificates/root-ca-manager.key
|
||||||
|
|
||||||
## Parsin cert.yml to set UID permissions
|
|
||||||
source /$CERT_TOOL
|
|
||||||
nodes_server=$( cert_parseYaml /certificates/certs.yml | grep nodes_server_name | sed 's/nodes_server_name=//' )
|
|
||||||
arr=($nodes_server)
|
|
||||||
|
|
||||||
for i in ${arr[@]};
|
for i in ${arr[@]};
|
||||||
do
|
do
|
||||||
chown 999:997 "/certificates/${i}.pem"
|
chown 999:997 "/certificates/${i}.pem"
|
||||||
|
|||||||
@@ -6,5 +6,4 @@ services:
|
|||||||
image: wazuh/wazuh-certs-generator:0.0.1
|
image: wazuh/wazuh-certs-generator:0.0.1
|
||||||
hostname: wazuh-certs-generator
|
hostname: wazuh-certs-generator
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/wazuh_indexer_ssl_certs/certs.yml:/config.yml
|
|
||||||
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
||||||
@@ -6,5 +6,4 @@ services:
|
|||||||
image: wazuh/wazuh-certs-generator:0.0.1
|
image: wazuh/wazuh-certs-generator:0.0.1
|
||||||
hostname: wazuh-certs-generator
|
hostname: wazuh-certs-generator
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/wazuh_indexer_ssl_certs/certs.yml:/config.yml
|
|
||||||
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
- ./config/wazuh_indexer_ssl_certs/:/certificates/
|
||||||
Reference in New Issue
Block a user