3.7.

절차

1. $ oc create project openshift-devspaces

   Copy to Clipboard Toggle word wrap

2. $ oc create secret TLS <tls_secret_name> \ 

   1

   
   --key <key_file> \ 

   2

   
   --cert <cert_file> \ 

   3

   
   -n openshift-devspaces

   Copy to Clipboard Toggle word wrap

   1

   2

   3

3. $ oc label secret <tls_secret_name> \ 

   1

   
   app.kubernetes.io/part-of=che.eclipse.org -n openshift-devspaces

   Copy to Clipboard Toggle word wrap

   1

4. 3.1.2절. “”을 참조하십시오.

   spec:
     networking:
       hostname: <hostname>     

   1

   
       tlsSecretName: <secret>  

   2

   Copy to Clipboard Toggle word wrap

   1

   2

절차

1. $ cat ca-cert-for-{prod-id-short}-*.pem | tr -d '\r' > custom-ca-certificates.pem

   Copy to Clipboard Toggle word wrap

2. $ oc create configmap custom-ca-certificates \
       --from-file=custom-ca-certificates.pem \
       --namespace=openshift-devspaces

   Copy to Clipboard Toggle word wrap

3. $ oc label configmap custom-ca-certificates \
       app.kubernetes.io/component=ca-bundle \
       app.kubernetes.io/part-of=che.eclipse.org \
       --namespace=openshift-devspaces

   Copy to Clipboard Toggle word wrap

검증 단계

1. $ oc get configmap \
       --namespace=openshift-devspaces \
       --output='jsonpath={.items[0:].data.custom-ca-certificates\.pem}' \
       --selector=app.kubernetes.io/component=ca-bundle,app.kubernetes.io/part-of=che.eclipse.org

   Copy to Clipboard Toggle word wrap

2. $ oc get pod \
       --selector=app.kubernetes.io/component=devspaces \
       --output='jsonpath={.items[0].spec.volumes[0:].configMap.name}' \
       --namespace=openshift-devspaces \
       | grep ca-certs-merged

   Copy to Clipboard Toggle word wrap

3. $ oc exec -t deploy/devspaces \
       --namespace=openshift-devspaces \
       -- cat /public-certs/custom-ca-certificates.pem

   Copy to Clipboard Toggle word wrap

4. $ oc logs deploy/devspaces --namespace=openshift-devspaces \
       | grep custom-ca-certificates.pem

   Copy to Clipboard Toggle word wrap

5. $ for certificate in ca-cert*.pem ;
     do openssl x509 -in $certificate -digest -sha256 -fingerprint -noout | cut -d= -f2;
     done

   Copy to Clipboard Toggle word wrap

6. $ oc exec -t deploy/devspaces --namespace=openshift-devspaces -- \
       keytool -list -keystore /home/user/cacerts \
       | grep --after-context=1 custom-ca-certificates.pem

   Copy to Clipboard Toggle word wrap

8. $ oc get configmap che-trusted-ca-certs \
       --namespace=<workspace_namespace> \
       --output='jsonpath={.data.custom-ca-certificates\.custom-ca-certificates\.pem}'

   Copy to Clipboard Toggle word wrap

9. $ oc get pod \
       --namespace=<workspace_namespace> \
       --selector='controller.devfile.io/devworkspace_name=<workspace_name>' \
       --output='jsonpath={.items[0:].spec.volumes[0:].configMap.name}' \
       | grep che-trusted-ca-certs

   Copy to Clipboard Toggle word wrap

10. $ oc get pod \
        --namespace=<workspace_namespace> \
        --selector='controller.devfile.io/devworkspace_name=<workspace_name>' \
        --output='jsonpath={.items[0:].spec.containers[0:]}' \
        | jq 'select (.volumeMounts[].name == "che-trusted-ca-certs") | .name'

    Copy to Clipboard Toggle word wrap

11. $ oc get pod \
        --namespace=<workspace_namespace> \
        --selector='controller.devfile.io/devworkspace_name=<workspace_name>' \
        --output='jsonpath={.items[0:].metadata.name}' \

    Copy to Clipboard Toggle word wrap

12. $ oc exec <workspace_pod_name> \
        --namespace=<workspace_namespace> \
        -- cat /public-certs/custom-ca-certificates.custom-ca-certificates.pem

    Copy to Clipboard Toggle word wrap