chore: rotate certificates

Signed-off-by: Guilhem Barthés <[email protected]>
Substra · Nov 19, 2024 · fd8b0ce · fd8b0ce
1 parent 42464c8
commit fd8b0ce
Show file tree

Hide file tree

Showing 8 changed files with 26 additions and 108 deletions.
diff --git a/examples/k8s/cm-tls-org-1-cacert.yaml b/examples/k8s/cm-tls-org-1-cacert.yaml
diff --git a/examples/k8s/cm-tls-org-2-cacert.yaml b/examples/k8s/cm-tls-org-2-cacert.yaml
diff --git a/examples/k8s/cm-tls-org-3-cacert.yaml b/examples/k8s/cm-tls-org-3-cacert.yaml
diff --git a/examples/k8s/secret-cacert-certmanager.yaml b/examples/k8s/secret-cacert-certmanager.yaml
@@ -1,10 +1,9 @@
 apiVersion: v1
 data:
-  tls.crt: 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
-  tls.key: LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcEFJQkFBS0NBUUVBMHFlQkJ5d2RZT2l4QmhyMHpFVERaT2hKamtnZkZqbW5ITER2bHRiRHQ1SkkvSXUzCjRhVEsvaGVnVFhmUnFRVnhualVNUWt0T2txeTBOcnl2dG5nWW92ek1CMUZXQ2xLTENPQkJhVHYrNjFtdUJUWXMKUVc0NHBxVzhlQ2k0VXB2U21vRGdxS0dxM3lnNzRQdWw5R2FnbnQyVW5YaTZlbXAyN3E5c1FQL05PUzBON0xEUwo1Vjg5YzQvaFZHa2hMMnNqU1BYeTZyYWpuTTFnS3huQUFuNHkrRStlTnpQQlNsNy9lb0VGU1pWbHpiY01BdXhnCmVXMlhjVk8xaTNlcVpLWnFQb2xCaVg1T0dtRGxlWDJNbXU0RTkrcGhLMzdUdFJ1UjVFeWp1b09vMG5JOXF0V2cKOWNITG5iMGVPd3ZUQVlBc3h3SEV1T1d1VmN4Tzl3TVdwWkFzaHdJREFRQUJBb0lCQVFDbnN0dkFKdmw0WmFaUAo4dlBCRGxqekl3MHpyT3k2bDhrV3lURGpSelBtRnhudG14a1hGRWJadzF0RmNNYkRKT2RQaUhHcThTS3JGN3diCisxaHpEZWFuRWxNbTNEUi80VGg0SjNkTFhJelROY0NZdTRpOXlnNWxkSG0ydXN3S1Q2eDRmWExjTEYvSWFkSkoKaUd5VVJZTkhGYVV6TzZKUXhDTE1YM0R4eWZMSnVVZHZnaGY0RFNEdFMrNTU5RGpuSkRFVzlSaktKWUp4ZklxTgpteFJ4NHpXZ2NvWG8xL2pYSitnajNaa0krTlgyV1ZFdmJPR3h1UmNTSE9lQ0lDU002RmJvRWh2YjJobmZLemVVCjdlMk41K1U3cUEwNlZZZk4wMjBEWWFIdFhHeVBCU2RTOVdHYWs5STlrRDRMVjE1djdyNHRDR1hsMnY5NCsva3EKUHlsWjhod2hBb0dCQVBCU0hld3YvZGtxdEhydlRNQ2pOdnJtMFhkbjcxOU5NdUpjRzdDMU9uZDZ4RlBaaDgvbwpZbm9NWGt5YjhPb0VuSnMyNGVYWmREdG56YllHVi9oUXZUMDFZcjl0M0RjU1lPQkgvTXZOWEtTVVZpdkthVjJBCkhVZFBtTUE0NVBHNkJQZVlEdGVRazhaN0tYc242WWtreXBKKzVnaGNDR1NjUUdaQkcySGpCSEh4QW9HQkFPQmwKNUhCMGYzcmtrRTdqSkd1RnRPeXRZYm1SL09QTTBHYllJQzBaeGxvK3d1K3NMMmY2ZElZeVlLanFQZFdvSDZZaQplNTBJY2QyUFM5MWlNd0tiYmxUVkdEaFpqbnZqWXEwNnMxcW1ieStDbHBWOXBiQ3QxSzdQNG9CWFJLQ3NuZm41ClZpRTdNTXNUbEUwbEUyNlZNbzYzc2VSL3JhYlExM0tmb3Z2dFRRMzNBb0dBVzRGSTkzZkdsbndXUUlFQm5wQUgKRFQzNklCY3BKQWFIQzMyNjVXdjhHU1pidnZtakp0ejdNakduYmxBcVNWRDhPSFdMU2pPa2VFSXNKOVQraGdSbwpLZmc3NDF2M2I5akZubUNLdHljNDBVblNEZGFDakNHT0JHc2daSURGVysxU210d0JPcjlJSlZrY0VGTEFMNEljCngrOGRzNjBuWFBmSjVhV0F3YUxwUEdFQ2dZRUFpTXVVeHprOXZaMDRtOTY4aFErdGk5cm1pRW9HOEpnYk01YnQKaHBELzZtUDRVa09WWXIyNzYxTXF1YzZTZzMxS1RlMFhqbE5ubHJtVWRoRTNKNCs1WXQzRk5oVGlWNFAyMDhQRgpNcTNqZWdNUjZXLy9ZZ1dXY2pzb3lUUnFFY2twUlFwTEIxY2VGNjZINmIrQWFSbHJDTFhUTElqcFE1aHN2dU95CmFBSHh4MkVDZ1lBUUttZVhLWlhYc3VDU1BxaE04RUFWVEh4cFIvN1RmK1ZYM2puQmI0bitDT2x3YzMzazczWGgKUER4U2xLeWNMQ1VSQ0ZWRHczVHdQNUhEY1IzSUxaeGR1eGxneFlIM3dNKzJUSXBHeVN6a2RXcy9JdldDNU9XRQp0YUVsaHJ1bmNqUHhtTGZ5MWN2MWdxeEpFbnFVRzBTbjlCclVEaXNVQUxXek14TXJCc3RRWVE9PQotLS0tLUVORCBSU0EgUFJJVkFURSBLRVktLS0tLQo=
+  tls.crt: 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
+  tls.key: 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
 kind: Secret
 metadata:
-  creationTimestamp: null
   name: orchestrator-tls-ca
   namespace: cert-manager
 type: kubernetes.io/tls
diff --git a/examples/k8s/secret-tls-org-1-cacert.yaml b/examples/k8s/secret-tls-org-1-cacert.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+data:
+  ca.crt: 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
+kind: Secret
+metadata:
+  name: orchestrator-tls-cacert
+  namespace: org-1
diff --git a/examples/k8s/secret-tls-org-2-cacert.yaml b/examples/k8s/secret-tls-org-2-cacert.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+data:
+  ca.crt: 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
+kind: Secret
+metadata:
+  name: orchestrator-tls-cacert
+  namespace: org-2