wip: [readme] deploy tls cluster

tsonglew · Sep 5, 2023 · c1bb44d · c1bb44d
1 parent 3dbc00c
commit c1bb44d
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/assets/etcd/Readme.md b/assets/etcd/Readme.md
@@ -0,0 +1,26 @@
+# Deploy a single node etcd cluster with SSL/TLS enabled
+
+## Generate SSL/TLS certificates
+
+### Download cfssl
+
+```bash
+mkdir ~/bin
+curl -s -L -o ~/bin/cfssl https://pkg.cfssl.org/R1.2/cfssl_linux-amd64
+curl -s -L -o ~/bin/cfssljson https://pkg.cfssl.org/R1.2/cfssljson_linux-amd64
+chmod +x ~/bin/{cfssl,cfssljson}
+```
+
+### Generate CA
+
+```bash
+export PATH=$PATH:~/bin
+mkdir ~/cfssl
+cd ~/cfssl
+cfssl print-defaults config > ca-config.json
+cfssl print-defaults csr > ca-csr.json
+```
+
+# Refer
+
+https://blog.try-except.com/technology/docker_etcd_cluster_ssl.html