kalostoykov

Ranger Cheatsheet

General

Shortcut	Description
`ranger`	Start Ranger
`Q`	Quit Ranger
`R`	Reload current directory
`?`	Ranger Manpages / Shortcuts

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

How to setup your own CA with OpenSSL

For educational reasons I've decided to create my own CA. Here is what I learned.

First things first

Lets get some context first.

	#!/bin/bash
	set -e
	set -o pipefail

	# Add user to k8s using service account, no RBAC (must create RBAC after this script)
	if [[ -z "$1" ]] \|\| [[ -z "$2" ]]; then
	echo "usage: $0 <service_account_name> <namespace>"
	exit 1
	fi

	# your server name goes here
	server=https://localhost:8443
	# the name of the secret containing the service account token goes here
	name=default-token-sg96k

	ca=$(kubectl get secret/$name -o jsonpath='{.data.ca\.crt}')
	token=$(kubectl get secret/$name -o jsonpath='{.data.token}' \| base64 --decode)
	namespace=$(kubectl get secret/$name -o jsonpath='{.data.namespace}' \| base64 --decode)

	echo "