Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: support custom libreswan secret token #18

Merged
merged 1 commit into from
Mar 25, 2022
Merged

Feature: support custom libreswan secret token #18

merged 1 commit into from
Mar 25, 2022

Conversation

njucjc
Copy link
Member

@njucjc njucjc commented Mar 23, 2022

No description provided.

@njucjc njucjc requested review from BSWANG and DrmagicE March 23, 2022 12:54
@njucjc njucjc linked an issue Mar 23, 2022 that may be closed by this pull request
hack/gen-yaml.sh Outdated
)
set +x
echo "==== create raven-agent.yaml in $OUT_YAML_DIR ===="
echo "psk='$(openssl rand -hex 64)'" > "${BUILD_YAML_DIR}"/default/psk.env
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

if psk.env already exist, use the exist key?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

raven.sh Outdated
@@ -19,7 +19,7 @@ set -e -x

trap "exit 1" SIGTERM SIGINT
Copy link
Collaborator

@BSWANG BSWANG Mar 24, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

trap will not work after the script exec to agent.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

delete it now

// TODO: secret PSK config
fmt.Fprintf(file, "%%any %%any : PSK \"%s\"\n", "alibaba")

psk := os.Getenv("PSK")
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PSK is libreswan’s config. Maybe LIBRESWAN_PSK or BACKEND_LIBRESWAN_PSK as env name will be better?

@DrmagicE Any suggestion?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LIBRESWAN_PSK +1

@BSWANG
Copy link
Collaborator

BSWANG commented Mar 25, 2022

LGTM
ping @DrmagicE

@DrmagicE
Copy link
Member

lgmt

@DrmagicE DrmagicE merged commit 7a79d1b into openyurtio:main Mar 25, 2022
@njucjc njucjc deleted the secret_gen branch April 6, 2022 05:33
@njucjc njucjc linked an issue Apr 14, 2022 that may be closed by this pull request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[feature request]support custom libreswan secret token replace raven image repo to openyurt
4 participants