Files
Jeremy Breiding 7cee33cb59 allow .pki folder to exist and use single script for 0 to hero. (#88)
* allow .pki folder to exist and use single script for 0 to hero.

* Update tls/run-tls.sh

Co-authored-by: David Reiss <dnr@dnr.im>

Co-authored-by: David Reiss <dnr@dnr.im>
2022-04-18 19:43:56 -07:00

841 B

Temporal with tls enabled dependencies

Execute

run from a shell

./tls/run-tls.sh

Script source with comments

#!/usr/bin/env bash
set -xe

# Build container image for generating cert material
docker build -t temporal_tls:test -f ${PWD}/tls/Dockerfile.tls .
mkdir -p .pki

# Run container to name volume and copy out CA certificate
docker run --rm -v temporal_tls_pki:/pki -v ${PWD}/.pki:/pki-out temporal_tls:test

# Build extra layers which copy in CA certificate to local trust store
# Allows for not having to disable host verification on TLS connections
COMPOSE_PROJECT_NAME=tls_test docker-compose -f docker-compose-tls.yml build --no-cache

# Run example docker-compose environment with elasticsearch and postgresql protected with TLS
COMPOSE_PROJECT_NAME=tls_test docker-compose -f docker-compose-tls.yml up