diff --git a/etc/k8s/cert/mycert b/etc/k8s/cert/mycert new file mode 100644 index 0000000..ea1c9f2 --- /dev/null +++ b/etc/k8s/cert/mycert @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDTTCCAjWgAwIBAgIUe5LC99EQTptIB+sLthn/JsTcGVswDQYJKoZIhvcNAQEL +BQAwNjEhMB8GA1UEAwwYYWNjb3VudC5vcGVuZXZlbnRodWIuY29tMREwDwYDVQQK +DAhWb2xvc29mdDAeFw0yMTA4MDMxMjI5NTVaFw0yMjA4MDMxMjI5NTVaMDYxITAf +BgNVBAMMGGFjY291bnQub3BlbmV2ZW50aHViLmNvbTERMA8GA1UECgwIVm9sb3Nv +ZnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9FsH+Bzslj/5/JuY +n+ZPb8k8CtuvOL/qV6mmayefKUPQu1Vol6zr8nFINe7r4GGtE3CvTEmauZxnjRD0 +eGoJRjpO31Ha0y2KROZx9U4LaeLQ3voQOR3wKo/fsftWs1ovs8gsMy/Xzl1LpvX1 +IaaIYvlErjHdyPTm7hMLFKOGDjYXsiW8HOZztEuqL0U65nYEXQb/MzWDPuR25QdO +4dX1yF+UplBawIw5/qTvKbsXNbFvytd9iC8ldKjY1jjluNxuN26UHYegg6pQ7Azw +c4TnHhY9UXOgBQ21/r/UPCwJ710Vp3WrtreoV51bEYZYgB/EC5pdM9I7CEgyxbIw +0Q/TAgMBAAGjUzBRMB0GA1UdDgQWBBRfUCG2rNJCI+DjQfghPqaJUrMCnTAfBgNV +HSMEGDAWgBRfUCG2rNJCI+DjQfghPqaJUrMCnTAPBgNVHRMBAf8EBTADAQH/MA0G +CSqGSIb3DQEBCwUAA4IBAQBbggVKGY/S2p3cE8mDhHwAr4MK9pjsTwygYYJwgXEf +olr7SP8ZcaMLlsauysYr1yuxTGr6ttTkj0hrTcQhoDDAC+debeJ6eFiBhMZH+lQC +gRTi46gmdmPYuhhXHpeSmGVxjAPQP2wVisFIe9Tdq9xdtD+1demmjkSotK7gn3vD +EJaUUBn60uxqJshXj9aXZ49b9hgGpywg+e30kwtNUowDsLLLE72CGHyaDYdes0rn +URaZ+4DezoBbefopzM+zImBwnDPntcRlP7Zw292iPdQO8FR2OtPZvqj3zewGP6Mh +X92/fmLNQw/u3CsZ/zkhu5eQGaboZsuERkeJv1L+o7bD +-----END CERTIFICATE----- diff --git a/etc/k8s/cert/mykey b/etc/k8s/cert/mykey new file mode 100644 index 0000000..5a6fac1 --- /dev/null +++ b/etc/k8s/cert/mykey @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCn9FsH+Bzslj/5 +/JuYn+ZPb8k8CtuvOL/qV6mmayefKUPQu1Vol6zr8nFINe7r4GGtE3CvTEmauZxn +jRD0eGoJRjpO31Ha0y2KROZx9U4LaeLQ3voQOR3wKo/fsftWs1ovs8gsMy/Xzl1L +pvX1IaaIYvlErjHdyPTm7hMLFKOGDjYXsiW8HOZztEuqL0U65nYEXQb/MzWDPuR2 +5QdO4dX1yF+UplBawIw5/qTvKbsXNbFvytd9iC8ldKjY1jjluNxuN26UHYegg6pQ +7Azwc4TnHhY9UXOgBQ21/r/UPCwJ710Vp3WrtreoV51bEYZYgB/EC5pdM9I7CEgy +xbIw0Q/TAgMBAAECggEAV04TH9JenrD/sqAX9b9wxewy6+4tAil6wYMuId7jqr2V +jeRDYmotrjzJnCLE/oIV5BUN52G9hRtk7QMMRDhvzkBeQO+fKiPKMWzdaXF9TzuM +dszhqhs2r8hAH6TyJMB4agGHVUqKXSDdqFyyz+jdG1pvfr8aFtLGU2CAL6tb0Wur +3qpnlfGjy63dToHGs7vdSYE+EKTcl0JndzPfspzisCCd+tAqCFo9vjxYKH+UDS6I +3+GIAVpEUEf6zNtGtPTpOvKSAthm2z5lXiIpWNoHSfPhzU2W3Dz2i2PVdifjZghg +bvAvS06opR+Y7jViayFBDGU4Yc0w+kjd3xZ230uqSQKBgQDabAuBBMdchyGTpS4r +i86c9rIkUNXKyPCIVjbKyc0Ia7D/cDAkPfZhylr1FtLuvO5xYzVAN3swuAED2oR/ +bId3ENMIqI5oBbPyMzVVWHntdY26iDYKACjIt6xayBK++e4RJb6jP1gTJvHbv+k2 +aslFwU0IYsnmPIYn1SmQQoZG1wKBgQDE2ZIU4k73J2wrRKraiO/wCaxcj7LH8gyp +aSn3EPQmUR0A0QLHewNlcdcsiyiWOg0hv0VjbmbyOD8C+Oh8WvrHRg2mXL2tvRVn +sNh/zDDtlWovlnts6so0voUgfepOhCj0iE0MzPKe2ypFMDE2Wj4c9gFRDUVnDLwQ +FuFCencrZQKBgQDH9+MQW6+ppo22/qMmevjN+41cciVJYm3UZBoFzntIGlARjESG +6bOIFBryB9NVfuNOK+W0xRajo9JKFOT5RANBnsWWR7sYwR/dvcQ2PqpiHB2FiO7w +ePTdzkqdUk7XSToLuOKv0m5wGleTOD/q8hkTI8XCx67QetjX3vAOgtksQQKBgFEB +W4z+iBJLBcdUbZ6ahWpZALXiaGbBY5Z/cUZ7ko0GChJg8GzYYVBopWxuI5iWcPr3 +M/2z2+dHYB7AASPTaKmCWXGhbmjFi75s1trYUzYhq13D5iyu/eDwmeYCCt6eoh/m +yxY+bIUUmXN5XncIcdEHJwmMlYfPhMB2OeJadRnFAoGAFCvb0dkqbqnSVLQhcOCq +9DJyi6/EEyW8fqYWsikaoZOMhRpvoQzUjjU1jikxVEEvsEG60aNzYWKOHJDQlisK +CoeBW5fKKdYxOz/TylTsrw2qvXVrTNouXTRx0raWM1bvjQPYJcaEwhNScWqV4vVR +x8RUguBiUhxPoCr8x4J+FCs= +-----END PRIVATE KEY----- diff --git a/etc/k8s/helm-chart/eventhub/charts/account/templates/account-ingress.yaml b/etc/k8s/helm-chart/eventhub/charts/account/templates/account-ingress.yaml index 2138aa0..e97bb76 100644 --- a/etc/k8s/helm-chart/eventhub/charts/account/templates/account-ingress.yaml +++ b/etc/k8s/helm-chart/eventhub/charts/account/templates/account-ingress.yaml @@ -6,6 +6,10 @@ metadata: nginx.ingress.kubernetes.io/rewrite-target: / nginx.ingress.kubernetes.io/force-ssl-redirect: "true" spec: + tls: + - hosts: + - account.openeventhub.com + secretName: account-tls rules: - host: "account.openeventhub.com" http: diff --git a/etc/k8s/helm-chart/eventhub/charts/account/templates/account-tls-secret.yaml b/etc/k8s/helm-chart/eventhub/charts/account/templates/account-tls-secret.yaml new file mode 100644 index 0000000..312e1ee --- /dev/null +++ b/etc/k8s/helm-chart/eventhub/charts/account/templates/account-tls-secret.yaml @@ -0,0 +1,8 @@ +apiVersion: v1 +type: kubernetes.io/tls +kind: Secret +metadata: + name: account-tls +data: + tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURUVENDQWpXZ0F3SUJBZ0lVZTVMQzk5RVFUcHRJQitzTHRobi9Kc1RjR1Zzd0RRWUpLb1pJaHZjTkFRRUwKQlFBd05qRWhNQjhHQTFVRUF3d1lZV05qYjNWdWRDNXZjR1Z1WlhabGJuUm9kV0l1WTI5dE1SRXdEd1lEVlFRSwpEQWhXYjJ4dmMyOW1kREFlRncweU1UQTRNRE14TWpJNU5UVmFGdzB5TWpBNE1ETXhNakk1TlRWYU1EWXhJVEFmCkJnTlZCQU1NR0dGalkyOTFiblF1YjNCbGJtVjJaVzUwYUhWaUxtTnZiVEVSTUE4R0ExVUVDZ3dJVm05c2IzTnYKWm5Rd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUNuOUZzSCtCenNsai81L0p1WQpuK1pQYjhrOEN0dXZPTC9xVjZtbWF5ZWZLVVBRdTFWb2w2enI4bkZJTmU3cjRHR3RFM0N2VEVtYXVaeG5qUkQwCmVHb0pSanBPMzFIYTB5MktST1p4OVU0TGFlTFEzdm9RT1Izd0tvL2ZzZnRXczFvdnM4Z3NNeS9YemwxTHB2WDEKSWFhSVl2bEVyakhkeVBUbTdoTUxGS09HRGpZWHNpVzhIT1p6dEV1cUwwVTY1bllFWFFiL016V0RQdVIyNVFkTwo0ZFgxeUYrVXBsQmF3SXc1L3FUdktic1hOYkZ2eXRkOWlDOGxkS2pZMWpqbHVOeHVOMjZVSFllZ2c2cFE3QXp3CmM0VG5IaFk5VVhPZ0JRMjEvci9VUEN3SjcxMFZwM1dydHJlb1Y1MWJFWVpZZ0IvRUM1cGRNOUk3Q0VneXhiSXcKMFEvVEFnTUJBQUdqVXpCUk1CMEdBMVVkRGdRV0JCUmZVQ0cyck5KQ0krRGpRZmdoUHFhSlVyTUNuVEFmQmdOVgpIU01FR0RBV2dCUmZVQ0cyck5KQ0krRGpRZmdoUHFhSlVyTUNuVEFQQmdOVkhSTUJBZjhFQlRBREFRSC9NQTBHCkNTcUdTSWIzRFFFQkN3VUFBNElCQVFCYmdnVktHWS9TMnAzY0U4bURoSHdBcjRNSzlwanNUd3lnWVlKd2dYRWYKb2xyN1NQOFpjYU1MbHNhdXlzWXIxeXV4VEdyNnR0VGtqMGhyVGNRaG9EREFDK2RlYmVKNmVGaUJoTVpIK2xRQwpnUlRpNDZnbWRtUFl1aGhYSHBlU21HVnhqQVBRUDJ3VmlzRkllOVRkcTl4ZHREKzFkZW1tamtTb3RLN2duM3ZECkVKYVVVQm42MHV4cUpzaFhqOWFYWjQ5YjloZ0dweXdnK2UzMGt3dE5Vb3dEc0xMTEU3MkNHSHlhRFlkZXMwcm4KVVJhWis0RGV6b0JiZWZvcHpNK3pJbUJ3bkRQbnRjUmxQN1p3MjkyaVBkUU84RlIyT3RQWnZxajN6ZXdHUDZNaApYOTIvZm1MTlF3L3UzQ3NaL3praHU1ZVFHYWJvWnN1RVJrZUp2MUwrbzdiRAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + tls.key: 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 diff --git a/src/EventHub.IdentityServer/EventHub.IdentityServer.csproj b/src/EventHub.IdentityServer/EventHub.IdentityServer.csproj index 69b7785..7875836 100644 --- a/src/EventHub.IdentityServer/EventHub.IdentityServer.csproj +++ b/src/EventHub.IdentityServer/EventHub.IdentityServer.csproj @@ -20,8 +20,8 @@ - - + + Always diff --git a/src/EventHub.IdentityServer/EventHubIdentityServerModule.cs b/src/EventHub.IdentityServer/EventHubIdentityServerModule.cs index deac090..f35016c 100644 --- a/src/EventHub.IdentityServer/EventHubIdentityServerModule.cs +++ b/src/EventHub.IdentityServer/EventHubIdentityServerModule.cs @@ -73,7 +73,7 @@ namespace EventHub private X509Certificate2 GetSigningCertificate(IWebHostEnvironment hostingEnv, IConfiguration configuration) { - var fileName = "localhost.pfx"; + var fileName = "EventHub.IdentityServer.pfx"; var passPhrase = "e8202f07-66e5-4619-be07-72ba76fde97f"; var file = Path.Combine(hostingEnv.ContentRootPath, fileName);