cmd/gomoteserver: add configuration for GTS certificates

This change configures the gomoteserver to generate certificates using GCP GTS. This only applies to gomotessh.golang.org. The gomote.golang.org domain certificate is managed by the Kubernetes cluster. Change-Id: If8b1b358aa085657d87e1988cabaa67a211af983 Reviewed-on: https://go-review.googlesource.com/c/build/+/641077 Reviewed-by: Roland Shoemaker <[email protected]> LUCI-TryBot-Result: Go LUCI <[email protected]> Reviewed-by: Dmitri Shuralyov <[email protected]> Reviewed-by: Dmitri Shuralyov <[email protected]>
golang · Jan 7, 2025 · 240dfd0 · 240dfd0
1 parent c463678
commit 240dfd0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cmd/gomoteserver/deployment-prod.yaml b/cmd/gomoteserver/deployment-prod.yaml
@@ -29,6 +29,9 @@ spec:
           - "-listen-https-selfsigned=:444"
           - "-private-host-key=secret:symbolic-datum-552/gomoteserver-private-host-key"
           - "-public-host-key=secret:symbolic-datum-552/gomoteserver-public-host-key"
+          - "-autocert-directory=https://dv.acme-v02.api.pki.goog/directory"
+          - "[email protected]"
+          - "-autocert-eab=secret:symbolic-datum-552/gomoteserver-certificates-eab"
         ports:
         - containerPort: 80
         - containerPort: 443