echo "[req_ext]" > server.ext
echo " " >> server.ext
echo "subjectAltName = @alt_names" >> server.ext
echo " " >> server.ext
echo "[alt_names]" >> server.ext
echo " " >> server.ext
echo "DNS.1 = grpc-svc" >> server.ext
echo "DNS.2 = grpc-pccd-svc" >> server.ext
echo "DNS.3 = grpc-ipsd-svc" >> server.ext
echo "DNS.4 = otel-collector" >> server.ext
echo "DNS.5 = grpc-downloader-svc" >> server.ext
echo "DNS.6 = grpc-blobd-svc" >> server.ext
echo "DNS.7 = grpc-f5ingress-svc" >> server.ext
echo "[req_ext]" >> validation-server.ext
echo " " >> validation-server.ext
echo "subjectAltName = @alt_names" >> validation-server.ext
echo " " >> validation-server.ext
echo "[alt_names]" >> validation-server.ext
echo " " >> validation-server.ext
echo "DNS.1 = f5-validation-svc.cnf-gateway.svc" >> validation-server.ext
echo "[req_ext]" > client.ext
echo " " >> client.ext
echo "subjectAltName = @alt_names" >> client.ext
echo " " >> client.ext
echo "[alt_names]" >> client.ext
echo " " >> client.ext
echo "email.1 = clientcert@f5net.com" >> client.ext
openssl genrsa -out grpc-ca.key 4096
openssl req -x509 -new -nodes -key grpc-ca.key -sha256 -days 365 -out grpc-ca.crt \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=Dev/CN=ca"
openssl genrsa -out validation-server.key 4096
openssl req -new -key validation-server.key -out validation-server.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in validation-server.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out validation-server.crt -extensions req_ext -days 365 \
-sha256 -extfile validation-server.ext
openssl genrsa -out grpc-server.key 4096
openssl req -new -key grpc-server.key -out grpc-server.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-server.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-CAcreateserial -out grpc-server.crt -extensions req_ext -days 365 -sha256 \
-extfile server.ext
openssl genrsa -out grpc-client.key 4096
openssl req -new -key grpc-client.key -out grpc-client.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-client.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-client.crt -extensions req_ext -days 365 \
-sha256 -extfile client.ext
openssl genrsa -out grpc-downloader-server.key 4096
openssl req -new -key grpc-downloader-server.key -out grpc-downloader-server.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-downloader-server.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-downloader-server.crt -extensions req_ext -days 365 \
-sha256 -extfile server.ext
openssl genrsa -out grpc-downloader-client.key 4096
openssl req -new -key grpc-downloader-client.key -out grpc-downloader-client.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-downloader-client.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-downloader-client.crt -extensions req_ext -days 365 \
-sha256 -extfile client.ext
openssl genrsa -out grpc-pccd-client.key 4096
openssl req -new -key grpc-pccd-client.key -out grpc-pccd-client.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-pccd-client.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-pccd-client.crt -extensions req_ext -days 365 \
-sha256 -extfile client.ext
openssl genrsa -out grpc-ipsd-client.key 4096
openssl req -new -key grpc-ipsd-client.key -out grpc-ipsd-client.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-ipsd-client.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-ipsd-client.crt -extensions req_ext -days 365 \
-sha256 -extfile client.ext
openssl genrsa -out grpc-otel-server.key 4096
openssl req -new -key grpc-otel-server.key -out grpc-otel-server.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-otel-server.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-otel-server.crt -extensions req_ext -days 365 \
-sha256 -extfile server.ext
openssl genrsa -out grpc-otel-client.key 4096
openssl req -new -key grpc-otel-client.key -out grpc-otel-client.csr \
-subj "/C=US/ST=WA/L=Seattle/O=F5/OU=PD/CN=f5net.com"
openssl x509 -req -in grpc-otel-client.csr -CA grpc-ca.crt -CAkey grpc-ca.key \
-set_serial 101 -outform PEM -out grpc-otel-client.crt -extensions req_ext -days 365 \
-sha256 -extfile client.ext
openssl base64 -A -in grpc-ca.crt -out grpc-ca-encode.crt
openssl base64 -A -in grpc-server.crt -out grpc-server-encode.crt
openssl base64 -A -in grpc-client.crt -out grpc-client-encode.crt
openssl base64 -A -in validation-server.crt -out validation-server-encode.crt
openssl base64 -A -in grpc-downloader-server.crt -out grpc-downloader-server-encode.crt
openssl base64 -A -in grpc-downloader-client.crt -out grpc-downloader-client-encode.crt
openssl base64 -A -in grpc-pccd-client.crt -out grpc-pccd-client-encode.crt
openssl base64 -A -in grpc-ipsd-client.crt -out grpc-ipsd-client-encode.crt
openssl base64 -A -in grpc-otel-client.crt -out grpc-otel-client-encode.crt
openssl base64 -A -in grpc-otel-server.crt -out grpc-otel-server-encode.crt
openssl base64 -A -in grpc-ca.key -out grpc-ca-encode.key
openssl base64 -A -in grpc-server.key -out grpc-server-encode.key
openssl base64 -A -in grpc-client.key -out grpc-client-encode.key
openssl base64 -A -in validation-server.key -out validation-server-encode.key
openssl base64 -A -in grpc-downloader-server.key -out grpc-downloader-server-encode.key
openssl base64 -A -in grpc-downloader-client.key -out grpc-downloader-client-encode.key
openssl base64 -A -in grpc-pccd-client.key -out grpc-pccd-client-encode.key
openssl base64 -A -in grpc-ipsd-client.key -out grpc-ipsd-client-encode.key
openssl base64 -A -in grpc-otel-client.key -out grpc-otel-client-encode.key
openssl base64 -A -in grpc-otel-server.key -out grpc-otel-server-encode.key
echo "apiVersion: v1" > keys-secret.yaml
echo "kind: Secret" >> keys-secret.yaml
echo "metadata:" >> keys-secret.yaml
echo " name: keys-secret" >> keys-secret.yaml
echo "data:" >> keys-secret.yaml
echo " grpc-svc.key: `cat grpc-server-encode.key`" >> keys-secret.yaml
echo " priv.key: `cat grpc-ca-encode.key`" >> keys-secret.yaml
echo " f5-ing-demo-f5ingress.key: `cat grpc-client-encode.key`" >> keys-secret.yaml
echo " validation-svc.key: `cat validation-server-encode.key`" >> keys-secret.yaml
echo " grpc-downloader-client.key: `cat grpc-downloader-client-encode.key`" >> keys-secret.yaml
echo " grpc-pccd-client.key: `cat grpc-pccd-client-encode.key`" >> keys-secret.yaml
echo " grpc-ipsd-client.key: `cat grpc-ipsd-client-encode.key`" >> keys-secret.yaml
echo " grpc-otel-client.key: `cat grpc-otel-client-encode.key`" >> keys-secret.yaml
echo " grpc-otel-server.key: `cat grpc-otel-server-encode.key`" >> keys-secret.yaml
echo "apiVersion: v1" > certs-secret.yaml
echo "kind: Secret" >> certs-secret.yaml
echo "metadata:" >> certs-secret.yaml
echo " name: certs-secret" >> certs-secret.yaml
echo "data:" >> certs-secret.yaml
echo " grpc-svc.crt: `cat grpc-server-encode.crt`" >> certs-secret.yaml
echo " ca_root.crt: `cat grpc-ca-encode.crt`" >> certs-secret.yaml
echo " f5-ing-demo-f5ingress.crt: `cat grpc-client-encode.crt`" >> certs-secret.yaml
echo " validation-svc.crt: `cat validation-server-encode.crt`" >> certs-secret.yaml
echo " grpc-downloader-client.crt: `cat grpc-downloader-client-encode.crt`" >> certs-secret.yaml
echo " grpc-pccd-client.crt: `cat grpc-pccd-client-encode.crt`" >> certs-secret.yaml
echo " grpc-ipsd-client.crt: `cat grpc-ipsd-client-encode.crt`" >> certs-secret.yaml
echo " grpc-otel-client.crt: `cat grpc-otel-client-encode.crt`" >> certs-secret.yaml
echo " grpc-otel-server.crt: `cat grpc-otel-server-encode.crt`" >> certs-secret.yaml