rancher
/
terraform-rancher2-aws
mirror of https://github.com/rancher/terraform-rancher2-aws.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

fix: add log to troubleshoot certificate issue (#45) 

Signed-off-by: matttrach <matt.trachier@suse.com>
This commit is contained in:
Matt Trachier 2024-11-11 22:41:39 -06:00 committed by GitHub
parent 75bfed0dc3
commit ff1dfd9b69
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/release.yaml vendored
View File

@ -20,7 +20,7 @@ jobs:
- name: Install Let's Encrypt Root Certificate - name: Install Let's Encrypt Root Certificate
run: | run: |
sudo apt-get update -y sudo apt-get update -y
sudo apt-get install -y ca-certificates wget sudo apt-get install -y ca-certificates wget openssl libssl-dev
wget -qO - https://letsencrypt.org/certs/isrgrootx1.pem.txt | sudo tee /usr/local/share/ca-certificates/isrgrootx1.crt > /dev/null wget -qO - https://letsencrypt.org/certs/isrgrootx1.pem.txt | sudo tee /usr/local/share/ca-certificates/isrgrootx1.crt > /dev/null
sudo update-ca-certificates sudo update-ca-certificates
- name: Verify Lets Encrypt CA Functionality - name: Verify Lets Encrypt CA Functionality

2
.github/workflows/validate.yaml vendored
View File

@ -175,7 +175,7 @@ jobs:
- name: Install Let's Encrypt Root Certificate - name: Install Let's Encrypt Root Certificate
run: | run: |
sudo apt-get update -y sudo apt-get update -y
sudo apt-get install -y ca-certificates wget sudo apt-get install -y ca-certificates wget openssl libssl-dev
wget -qO - https://letsencrypt.org/certs/isrgrootx1.pem.txt | sudo tee /usr/local/share/ca-certificates/isrgrootx1.crt > /dev/null wget -qO - https://letsencrypt.org/certs/isrgrootx1.pem.txt | sudo tee /usr/local/share/ca-certificates/isrgrootx1.crt > /dev/null
sudo update-ca-certificates sudo update-ca-certificates

3
modules/rancher_bootstrap/rancher_externalTLS/main.tf
View File

@ -107,7 +107,8 @@ resource "terraform_data" "get_ping" {
] ]
provisioner "local-exec" { provisioner "local-exec" {
command = <<-EOT command = <<-EOT
curl -vvv "https://${local.rancher_domain}/ping" echo | openssl s_client -showcerts -servername ${local.rancher_domain} -connect "https://${local.rancher_domain}/ping" 2>/dev/null | openssl x509 -inform pem -noout -text || true
curl --trace-ascii "-" -vvvv "https://${local.rancher_domain}/ping"
EOT EOT
} }
} }