I want to put specific validation.pem into fresh chef-server installation. This will be useful if you have some predefined nodes, or kickstart files with specific validation.pem inside and want to boot fresh chef-server installation.
1. Generate public key from my-validation.pem
# openssl rsa -in my-validation.pem -pubout > key.pub
2. Goes to http://127.0.0.1:5984/_utils/database.html?chef/_design/clients/_view/all
Click on chef-validator, then double click on public_key value. And paste contents of key.pub. Do not forget to push "Save Document" in the top left corner.
3. Replace /etc/chef/validation.pem with your my-validation.pem
mv /etc/chef/validation.pem /etc/chef/validation-old.pem
mv my-validation.pem /etc/chef/validation.pem
Now you be able to register new nodes with your validation.pem
1. Generate public key from my-validation.pem
# openssl rsa -in my-validation.pem -pubout > key.pub
2. Goes to http://127.0.0.1:5984/_utils/database.html?chef/_design/clients/_view/all
Click on chef-validator, then double click on public_key value. And paste contents of key.pub. Do not forget to push "Save Document" in the top left corner.
3. Replace /etc/chef/validation.pem with your my-validation.pem
mv /etc/chef/validation.pem /etc/chef/validation-old.pem
mv my-validation.pem /etc/chef/validation.pem
Now you be able to register new nodes with your validation.pem
Комментариев нет:
Отправить комментарий