nebula

mirror of https://github.com/slackhq/nebula.git synced 2025-11-22 16:34:25 +01:00

Files

Hal Martin 4df8bcb1f5 nebula-cert: support reading CA passphrase from env (#1421 )

* nebula-cert: support reading CA passphrase from env

This patch extends the `nebula-cert` command to support reading
the CA passphrase from the environment variable `CA_PASSPHRASE`.

Currently `nebula-cert` depends in an interactive session to obtain
the CA passphrase. This presents a challenge for automation tools like
ansible. With this change, ansible can store the CA passphrase in a
vault and supply it to `nebula-cert` via the `CA_PASSPHRASE`
environment variable for non-interactive signing.

Signed-off-by: Hal Martin <1230969+halmartin@users.noreply.github.com>

* name the variable NEBULA_CA_PASSPHRASE

---------

Signed-off-by: Hal Martin <1230969+halmartin@users.noreply.github.com>
Co-authored-by: JackDoan <me@jackdoan.com>

2025-11-17 14:41:08 -06:00

ca_test.go

nebula-cert: support reading CA passphrase from env (#1421 )

2025-11-17 14:41:08 -06:00

ca.go

nebula-cert: support reading CA passphrase from env (#1421 )

2025-11-17 14:41:08 -06:00

keygen_test.go

Bump golangci/golangci-lint-action from 6 to 7 (#1361 )

2025-04-01 13:24:19 -04:00

keygen.go

Cert interface (#1212 )