mirror of
https://github.com/google/nomulus.git
synced 2025-06-27 23:03:34 +02:00
Create certificate bucket before running terraform
------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=193044934
This commit is contained in:
parent
23c9cf926c
commit
001f819616
1 changed files with 8 additions and 1 deletions
|
@ -88,6 +88,13 @@ not only the certificate for your domain, but also certificates from
|
||||||
intermediate CAs, these certificates must appear in order. The previous
|
intermediate CAs, these certificates must appear in order. The previous
|
||||||
certificate's issuer must be the next certificate's subject.
|
certificate's issuer must be the next certificate's subject.
|
||||||
|
|
||||||
|
The certificate will be encrypted by KMS and uploaded to a GCS bucket. To create
|
||||||
|
the bucket:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
$ gsutil mb -p <proxy-project> gs://<certificate-bucket-name>/
|
||||||
|
```
|
||||||
|
|
||||||
### Setup proxy project
|
### Setup proxy project
|
||||||
|
|
||||||
First setup the [Application Default
|
First setup the [Application Default
|
||||||
|
@ -181,7 +188,7 @@ This encrypted file is then uploaded to a GCS bucket specified in the
|
||||||
`config.tf` file.
|
`config.tf` file.
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
$ gsutil cp <combined_secret.pem.enc> gs://<your-gcs-bucket>
|
$ gsutil cp <combined_secret.pem.enc> gs://<your-certificate-bucket>
|
||||||
```
|
```
|
||||||
|
|
||||||
### Edit proxy config file
|
### Edit proxy config file
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue