Infrastructure for the Blockchain-based Tree Tracking Hyperledger Fabric-Network - #279
Infrastructure for the Blockchain-based Tree Tracking Hyperledger Fabric-Network#279imos64 wants to merge 11 commits into
Conversation
…rk, including Root CA, Intermediate CAs, deployment scripts
|
Hi @dadiorchen your approval is required for my Infrastructure for the Blockchain-based Tree Tracking Hyperledger Fabric-Network pull request |
mckornfield
left a comment
mckornfield
left a comment
There was a problem hiding this comment.
is this already deployed? jumping back in so mostly asking questions
| ############################################################################# | ||
|
|
||
| # URL of the Fabric-ca-server (default: http://localhost:7054) | ||
| url: https://verifier-ca.hlf-ca.svc.cluster.local:7054 |
There was a problem hiding this comment.
will https work in the cluster?
| - name: FABRIC_CA_SERVER_PORT | ||
| value: "{{ .Values.intermediateCA.port }}" | ||
| - name: FABRIC_CA_SERVER_PARENT_URL | ||
| value: "https://{{ .Values.intermediateCA.parentID }}:{{ .Values.intermediateCA.parentSecret }}@{{ .Values.intermediateCA.parentHost }}:7054" |
There was a problem hiding this comment.
same q, but maybe we use the CA cert in some way with this setup that it works?
| @@ -0,0 +1,63 @@ | |||
| {{- if .Values.intermediateCA.enabled -}} | |||
There was a problem hiding this comment.
are these bkp* files ones that should be removed?
| @@ -0,0 +1,6 @@ | |||
| apiVersion: v2 | |||
| name: greenstand-ca | |||
There was a problem hiding this comment.
probably should put fabric in the title here, just CA makes me think it's for certs in the whole cluster
| @@ -0,0 +1,6 @@ | |||
| apiVersion: v2 | |||
| name: investor-ca | |||
There was a problem hiding this comment.
question: what is different between the two charts? Can it not be abstracted just with values?
|
|
||
| tls: | ||
| enabled: true | ||
| secretName: verifier-ca-tls-cert |
There was a problem hiding this comment.
how are the secrets getting created? sealed secrets or?
| TLS_KEY=$(find ${TLS_DIR}/keystore -name "*.pem" | head -n 1) | ||
|
|
||
| if [[ -f "$TLS_CA" && -f "$TLS_CERT" && -f "$TLS_KEY" ]]; then | ||
| kubectl create secret generic ${ICA}-tls-cert \ |
There was a problem hiding this comment.
I guess this answers my earlier question, so we are just kubectl create ing them?
| chmod +x restore-ca.sh | ||
|
|
||
| # Basic restore back into hlf-ca | ||
| ./restore-ca.sh --archive /path/to/fabric-ca-backup-2025-08-08_201755.tgz |
There was a problem hiding this comment.
should this be an env var/ variable?
| if [[ "$DRY_RUN" == "true" ]]; then | ||
| [[ -f "$ETC_TGZ" ]] && log "[DRY-RUN] kubectl -n $NS cp $ETC_TGZ $POD:/tmp/server-etc.tgz" | ||
| [[ -f "$DATA_TGZ" ]] && log "[DRY-RUN] kubectl -n $NS cp $DATA_TGZ $POD:/tmp/server-data.tgz" | ||
| log "[DRY-RUN] kubectl -n $NS exec $POD -- sh -lc 'set -e; [[ -f /tmp/server-etc.tgz ]] && tar -C / -xzf /tmp/server-etc.tgz; [[ -f /tmp/server-data.tgz ]] && tar -C / -xzf /tmp/server-data.tgz; rm -f /tmp/server-*.tgz'" |
There was a problem hiding this comment.
oof some of these commands are a bit hard to read
| @@ -0,0 +1,240 @@ | |||
| # Enterprise Blockchain (Hyperledger Fabric) Integration with Greenstand Treetracker Platform | |||
There was a problem hiding this comment.
should we remove the spaces from the name of this file?
2 participants
Certificate Authority infrastructure for the Hyperledger Fabric network, including Root CA, Intermediate CAs, deployment scripts, and management tools.