回复:Re: about consul_agent's cert


于长江 <yuchangjiang at cmss.chinamobile.com...>
 

it works, thank you~




于长江
15101057694


原始邮件
发件人:Gwenn Etourneaugetourneau(a)pivotal.io
收件人:Discussions about Cloud Foundry projects and the system overall.cf-dev(a)lists.cloudfoundry.org
发送时间:2015年12月14日(周一) 12:48
主题:[cf-dev] Re: about consul_agent's cert


Please read the documentationhttp://docs.cloudfoundry.org/deploying/common/consul-security.html

On Mon, Dec 14, 2015 at 11:35 AM, 于长江 yuchangjiang(a)cmss.chinamobile.com wrote:

hi,
when i deploy cf-release, consul agent job failed start, i found the err log in the vm.


== Starting Consul agent...
== Error starting agent: Failed to start Consul server: Failed to parse any CA certificates
--------------------------------------------
then i found the configuration in cf’s manifest file is not correct,like this:


consul:
encrypt_keys:
- CONSUL_ENCRYPT_KEY
ca_cert: CONSUL_CA_CERT
server_cert: CONSUL_SERVER_CERT
server_key: CONSUL_SERVER_KEY
agent_cert: CONSUL_AGENT_CERT
agent_key: CONSUL_AGENT_KEY


i have no idea of how to complete these fields, can someone give me an example, thanks~


于长江
15101057694

Join cf-dev@lists.cloudfoundry.org to automatically receive all group messages.