Abdul/automate cert rotate #7543

iamazzeez · 2022-11-14T13:12:47Z

Signed-off-by: Abdul-Az aazeez@progress.com
https://chefio.atlassian.net/browse/KINETICS-233

🔩 Description: What code changed, and why?

chef-automate cert-rotate --automate --root-ca "<>" --private-cert "<>" --public-cert "<>" --node ”<>”
This will rotate the certificate in the given Automate node.

⛓️ Related Resources

👍 Definition of Done

chef-automate cert-rotate --automate --root-ca "<>" --private-cert "<>" --public-cert "<>" --node ”<>”
Note: root-ca is ignored when --node flag is provided

👟 How to Build and Test the Change

Add this package in your manifest while deploying HA:
sahiba3108/automate-ha-deployment/0.1.0/20221028084038

Install this pkg in your bastion host:
hab pkg install aazeez/automate-cli/0.1.0/20221114130452 -bf

Run the below command in bastion:
chef-automate cert-rotate --public-cert client.pem --private-cert client-key.pem --root-ca root-ca.pem --automate --node ""
(You can also use --postgres flag instead of pg)
This will rotate the public and private cert in given pg node when root cert is same.

✅ Checklist

All PRs must tick these:

I have read the CONTRIBUTING document.
All commits signed-off for the Developer Certification of Origin.

With occasional exceptions, all PRs from Progress employees must tick these:

Is the code clear? (complicated code or lots of comments--subdivide and use well-named methods, meaningful variable names, etc.)
Consistency checked? (user notifications, user prompts, visual patterns, code patterns, variable names)
Repeated code blocks eliminated? (adapt and reuse existing components, blocks, functions, etc.)
Spelling, grammar, typos checked? (at a minimum use make spell in any component directory)
Code well-formatted? (indents, line breaks, etc. improve rather than hinder readability)