Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bootstrap PKI for IDP and InvenioRDM #391

Merged
merged 11 commits into from
Feb 5, 2025
Merged

Bootstrap PKI for IDP and InvenioRDM #391

merged 11 commits into from
Feb 5, 2025

Conversation

rpoet-jh
Copy link
Contributor

@rpoet-jh rpoet-jh commented Feb 3, 2025

This PR changes the following:

  • Removes all PKI files for the idp and inveniordm services in this repo (self signed certs/private keys/keystores/secretkeys).
  • Adds certs/cert-gen docker compose scripts that create the required PKI files for the idp and inveniordm services on startup if needed.

The instructions for running local pass-docker remains the same.

The instructions for running local pass-docker with inveniordm change slightly. After the API token is generated in inveniordm, the INVENIORDM_API_TOKEN will need to be updated in .eclipse-pass.invenio.local_env in the invenio-rdm/pass-docker-invenio-rdm directory.

@rpoet-jh rpoet-jh requested a review from markpatton February 3, 2025 20:39
@rpoet-jh rpoet-jh self-assigned this Feb 3, 2025
Copy link
Contributor

@markpatton markpatton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice job! This looks like it was a pain.

@rpoet-jh rpoet-jh merged commit 5152b9c into main Feb 5, 2025
2 checks passed
@rpoet-jh rpoet-jh deleted the rdp-1121-cert-gen branch February 14, 2025 13:33
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Generate self-signed certs/keys/keystores in pass-docker
2 participants