Skip to content

Commit 3a2d572

Browse files
committed
documented usage with PTFE private CAs
1 parent cd100e6 commit 3a2d572

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

operations/automation-script/README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,12 @@ Do the following before using this script:
4040
1. `cd operations/automation-script`
4141
1. Make sure [python](https://www.python.org/downloads/) is installed on your machine and in your path since the script uses python to parse JSON documents returned by the Terraform Enterprise REST API.
4242

43+
## Using with Private Terraform Enteprise Server using private CA
44+
If you use this script with a Private Terraform Enterprise (PTFE) server that uses a private CA instead of a public CA, you will need to ensure that the curl commands run by the script will trust the private CA. There are several ways to do this. The first is easiest for enabling the automation script to run, but it only affects curl. The second and third are useful for using the Terraform and TFE CLIs against your PTFE server. The third is a permanent solution.
45+
1. `export CURL_CA_BUNDLE=<path_to_ca_bundle>`
46+
1. Export the Golang SSL_CERT_FILE and/or SSL_CERT_DIR environment variables. For instance, you could set the first of these to the same CA bundle used in option 1.
47+
1. Copy your certificate bundle to /etc/pki/ca-trust/source/anchors and then run `update-ca-trust extract`.
48+
4349
## Instructions
4450
Follow these instructions to run the script with the included main.tf and variables.csv files:
4551

0 commit comments

Comments
 (0)