https://github.com/davidjenni/mini-ca
A private Certificate Authority (CA) "en miniature", deployed as a small VM on Azure.
https://github.com/davidjenni/mini-ca
azure certificate-authority coreos docker
Last synced: 3 months ago
JSON representation
A private Certificate Authority (CA) "en miniature", deployed as a small VM on Azure.
- Host: GitHub
- URL: https://github.com/davidjenni/mini-ca
- Owner: davidjenni
- Created: 2018-04-05T06:04:56.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2018-04-16T15:35:39.000Z (about 8 years ago)
- Last Synced: 2024-10-18T05:57:44.641Z (over 1 year ago)
- Topics: azure, certificate-authority, coreos, docker
- Language: Shell
- Size: 12.7 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# mini-ca
A private Certificate Authority (CA) "en miniature", deployed as a small VM on Azure.
## Usage
TBD
## Deployment
To deploy, the dev tools (below) need to be installed. Deployment is using an [Azure ARM template file](https://docs.microsoft.com/en-us/azure/templates/).
The deployment is configured using a simple [YAML file](https://github.com/davidjenni/mini-CA/blob/master/ca.yaml); in absence of this file, useful defaults are selected. To deploy, run the following command:
```bash
./deploy.sh ca.yaml
```
An optional second parameter `--dryrun` will do a validation of the config with Azure ARM, but without actually creating any resources. Note that an empty resource group will be created.
ARM template deployments are idempotent, so calling `deploy.sh` more than once without changing the YAML config, cloudconfig.yaml or CA-node.ARM.json will quickly run without changing any of the resources.
To delete the resource group and its resources, use the Azure CLI:
```bash
az group delete --name
```
The ARM template also sets up boot diagnostics. This can help debugging if the VM will not boot up to the SSH prompt (e.g. when making changes to the cloudconfig.yaml file...). Use the [Serial Console](http://aka.ms/serialconsolehelp) to inspect the boot messages and to connect to an emergency console prompt. Don't ask how I know.
## Dev Environment
My environment is a MBP. The following tools are assumed to be installed:
``` bash
brew install azure-cli coreos-ct cfssl docker
```