https://github.com/f5devcentral/f5-certificate-rotate
https://github.com/f5devcentral/f5-certificate-rotate
Last synced: 11 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/f5devcentral/f5-certificate-rotate
- Owner: f5devcentral
- Created: 2020-06-15T22:22:43.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2022-06-22T18:21:22.000Z (over 3 years ago)
- Last Synced: 2025-01-14T15:18:54.667Z (about 1 year ago)
- Language: HCL
- Size: 16.1 MB
- Stars: 5
- Watchers: 6
- Forks: 7
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# F5 BIG-IP HashiCorp Vault Integration
This repo uses HashiCorp Vault to manage SSL Certificates
# Architecture
# What does the repo uses ?
- Repo uses F5 BIG-IP VE Version 14.X
- HashiCorp Vault 1.5
# How to use Repo ?
- Git Clone repo using ``` https://github.com/scshitole/bigip-vault.git ```
- change directory ``` cd bigip-vault ```
- deploy ``` terraform plan && terraform apply -auto-approve ```
- This will deploy F5 BIG-IP intance & install Vault on ubuntu on AWS
- SSH into the ubuntu server and cd/tmp
- Configure vault and use vaul agent
```
export VAULT_ADDR=http://127.0.0.1:8200
export VAULT_TOKEN=root
vault write pki_int/roles/web-certs allowed_domains=demof5.com ttl=160s max_ttl=30m allow_subdomains=true
vault auth enable approle
vault policy write app-pol app-pol.hcl
vault write auth/approle/role/web-certs policies="app-pol"
vault read -format=json auth/approle/role/web-certs/role-id | jq -r '.data.role_id' > roleID
vault write -f -format=json auth/approle/role/web-certs/secret-id | jq -r '.data.secret_id' > secretID
vault agent -config=agent-config.hcl -log-level=debug
```
- Open a new terminal and SSH into the ubuntu server again.
- Run the command ``` bash stuff.sh ``` this will deploy the AS3 rpm & VIP
- Stop the vault agent and uncomment ``` command = "bash updt.sh" ``` in the file agent-config.hcl
- Run ``` vault agent -config=agent-config.hcl -log-level=debug ``` to update the certs automatically