Skip to content

Commit 3d6ffe0

Browse files
masontikhonovalexaladov-codefreshAlex Aladov
authored
docs: Update README.md - Added Windows runtimes cert renewal procedure (#271) (#351)
* Update README.md Added Windows runtimes cert renewal procedure * Apply suggestion from @masontikhonov * Add the Windows RE case according to the recommendations --------- Co-authored-by: alexaladov-codefresh <44968728+alexaladov-codefresh@users.noreply.github.com> Co-authored-by: Alex Aladov <alexaladov@Alexs-MacBook-Pro.local>
1 parent 47e45b9 commit 3d6ffe0

2 files changed

Lines changed: 32 additions & 0 deletions

File tree

README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2680,6 +2680,22 @@ Delete `codefresh-certs-server` k8s secret and run [./configure-dind-certs.sh](h
26802680
kubectl -n $NAMESPACE delete secret codefresh-certs-server
26812681
./configure-dind-certs.sh -n $RUNTIME_NAMESPACE https://$CODEFRESH_HOST $CODEFRESH_API_TOKEN
26822682
```
2683+
**Case C: Windows runtimes**
2684+
2685+
For Windows runtimes, you must perform the following steps:
2686+
2687+
1. Obtain a node registration token (you can generate it in any account with the "privateNodes" feature enabled).
2688+
2. Prepare the following parameters (the same for all Windows nodes):
2689+
* The node registration token
2690+
* The correct Docker root path (may vary)
2691+
* The platform API address
2692+
3. On each Windows node, one by one:
2693+
* Run the following PowerShell script:
2694+
[docker-vm/hybrid/gen-docker-certs.ps1 at master · codefresh-io/docker-vm](https://github.com/codefresh-io/docker-vm/blob/master/hybrid/gen-docker-certs.ps1)
2695+
* Provide the IP address of the specific node when running the script.
2696+
4. After the script completes, restart the Docker service on the node to ensure the new certificates are applied.
2697+
2698+
Repeat these steps for every Windows node in the runtime.
26832699

26842700
### Consul Error: Refusing to rejoin cluster because the server has been offline for more than the configured server_rejoin_age_max
26852701

README.md.gotmpl

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2696,6 +2696,22 @@ Delete `codefresh-certs-server` k8s secret and run [./configure-dind-certs.sh](h
26962696
kubectl -n $NAMESPACE delete secret codefresh-certs-server
26972697
./configure-dind-certs.sh -n $RUNTIME_NAMESPACE https://$CODEFRESH_HOST $CODEFRESH_API_TOKEN
26982698
```
2699+
**Case C: Windows runtimes**
2700+
2701+
For Windows runtimes, you must perform the following steps:
2702+
2703+
1. Obtain a node registration token (you can generate it in any account with the "privateNodes" feature enabled).
2704+
2. Prepare the following parameters (the same for all Windows nodes):
2705+
* The node registration token
2706+
* The correct Docker root path (may vary)
2707+
* The platform API address
2708+
3. On each Windows node, one by one:
2709+
* Run the following PowerShell script:
2710+
[docker-vm/hybrid/gen-docker-certs.ps1 at master · codefresh-io/docker-vm](https://github.com/codefresh-io/docker-vm/blob/master/hybrid/gen-docker-certs.ps1)
2711+
* Provide the IP address of the specific node when running the script.
2712+
4. After the script completes, restart the Docker service on the node to ensure the new certificates are applied.
2713+
2714+
Repeat these steps for every Windows node in the runtime.
26992715

27002716
### Consul Error: Refusing to rejoin cluster because the server has been offline for more than the configured server_rejoin_age_max
27012717

0 commit comments

Comments
 (0)