about consul_agent's cert


Gwenn Etourneau
 

Please read the documentation
http://docs.cloudfoundry.org/deploying/common/consul-security.html

On Mon, Dec 14, 2015 at 11:35 AM, 于长江 <yuchangjiang(a)cmss.chinamobile.com>
wrote:

hi,
when i deploy cf-release, consul agent job failed start, i found the
err log in the vm.

==> Starting Consul agent...

==> Error starting agent: Failed to start Consul server: Failed to parse
any CA certificates

--------------------------------------------

then i found the configuration in cf’s manifest file is not correct,like
this:


consul:

encrypt_keys:

- CONSUL_ENCRYPT_KEY

ca_cert: CONSUL_CA_CERT

server_cert: CONSUL_SERVER_CERT

server_key: CONSUL_SERVER_KEY

agent_cert: CONSUL_AGENT_CERT

agent_key: CONSUL_AGENT_KEY


i have no idea of how to complete these fields, can someone give me an
example, thanks~

------------------------------
于长江
15101057694


于长江 <yuchangjiang at cmss.chinamobile.com...>
 

hi,
when i deploy cf-release, consul agent job failed start, i found the err log in the vm.


== Starting Consul agent...
== Error starting agent: Failed to start Consul server: Failed to parse any CA certificates
--------------------------------------------
then i found the configuration in cf’s manifest file is not correct,like this:


consul:
encrypt_keys:
- CONSUL_ENCRYPT_KEY
ca_cert: CONSUL_CA_CERT
server_cert: CONSUL_SERVER_CERT
server_key: CONSUL_SERVER_KEY
agent_cert: CONSUL_AGENT_CERT
agent_key: CONSUL_AGENT_KEY


i have no idea of how to complete these fields, can someone give me an example, thanks~


于长江
15101057694