
https://habr.com/ru/company/southbridge/blog/467883/
Size: a a a
brew cask install java2) generate p12 (u must already have web-certificates)
openssl pkcs12 -export -in cert.pem -inkey key.pem -out jenkins.p123) generate .jks
keytool -importkeystore -srckeystore jenkins.p12 -srcstoretype PKCS12 -destkeystore jenkins_keystore.jks -deststoretype JKS## on jenkins server
ExecStart=/usr/bin/docker run --rm -a STDIN -a STDOUT -a STDERR \
-u root \
-p 50000:50000 \
-p 443:8443 \
-v /var/jenkins-data:/var/jenkins_home \
--name jenkins \
jenkins/jenkins:lts \
--httpPort=-1 \
--httpsPort=8443 \
--httpsKeyStore=/var/jenkins_home/jenkins_keystore.jks \
--httpsKeyStorePassword=1234
openssl x509 -in <(openssl s_client -connect company.com:443 -prexit 2>/dev/null) > ca.crt#ssl
resource "kubernetes_secret" "company-dkr-key" {#terraform #docker #kubernetes
metadata {
name = "company-dkr-key"
namespace = "${kubernetes_namespace.company.metadata.0.name}"
}
data = {
".dockerconfigjson" = "{\"auths\":{\"${var.company-dkr-url}\":{\"username\":\"${var.company-dkr-user}\",\"password\":\"${var.company-dkr-password}\",\"email\":\"email\",\"auth\":\"${base64encode(format("%s:%s", var.company-dkr-user, var.company-dkr-password))}\"}}}"
## OR u can also do this from file
# ".dockercfg" = "${file("${path.module}/docker.cfg")}"
}
type = "kubernetes.io/dockercfg"
}