Getting Started
In this tutorial, we will use the Self Signed Certificates Operator to provide X509 certificates to the TLS Certificates Requirer tusing the tls-certificates integration.
1. Install pre-requisites
Install MicroK8s:
sudo snap install microk8s
Enable the hostpath-storage MicroK8s add-on:
microk8s enable hostpath-storage
Install Juju:
sudo snap install juju
2. Bootstrap a Juju controller
Bootstrap a Juju controller:
juju bootstrap microk8s
Create a Juju model:
juju add-model demo
3. Deploy and integrate the charms
Deploy the Self Signed Certificates operator:
juju deploy self-signed-certificates
Deploy the TLS Certificates Requirer operator:
juju deploy tls-certificates-requirer --channel=edge
Integrate the two:
juju integrate tls-certificates-requirer self-signed-certificates
Wait for both charms to be in the Active/Idle state:
ubuntu@server:~$ juju status
Model Controller Cloud/Region Version SLA Timestamp
demo aws-us-east-2 aws/us-east-2 3.1.7 unsupported 20:06:22-05:00
App Version Status Scale Charm Channel Rev Exposed Message
self-signed-certificates active 1 self-signed-certificates stable 57 no
tls-certificates-requirer active 1 tls-certificates-requirer edge 27 no Certificate is available
Unit Workload Agent Machine Public address Ports Message
self-signed-certificates/0* active idle 0 18.226.164.205
tls-certificates-requirer/0* active idle 1 3.17.179.73 Certificate is available
Machine State Address Inst id Base AZ Message
0 started 18.226.164.205 i-02fef38d887ce357f ubuntu@22.04 us-east-2a running
1 started 3.17.179.73 i-0d9d6231ee5b7c1e9 ubuntu@22.04 us-east-2a running
4. Retrieve the TLS Certificates
Use the TLS Certificates Requirer’s get-certificate action to retrieve the Let’s Encrypt certificate:
juju run tls-certificates-requirer/0 get-certificate
You should expect this output (with different certificates of course):
ubuntu@server:~$ juju run tls-certificates-requirer/0 get-certificate
Running operation 1 with 1 task
- task 2 on unit-tls-certificates-requirer-0
Waiting for task 2...
ca-certificate: |-
-----BEGIN CERTIFICATE-----
MIIDZzCCAk+gAwIBAgIUVDNDj2jL72Qdmh19ACQDRjj0Wi0wDQYJKoZIhvcNAQEL
BQAwOTELMAkGA1UEBhMCVVMxKjAoBgNVBAMMIXNlbGYtc2lnbmVkLWNlcnRpZmlj
YXRlcy1vcGVyYXRvcjAeFw0yNDAxMTgwMTA0MDBaFw0yNTAxMTcwMTA0MDBaMDkx
CzAJBgNVBAYTAlVTMSowKAYDVQQDDCFzZWxmLXNpZ25lZC1jZXJ0aWZpY2F0ZXMt
b3BlcmF0b3IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFoRCfr9R
PCnvAeewEPjXOF55WWhFjpRm4VcsO1uninMaSAYQc1TRJMdQvK00ia69dY2CmEE+
UK0DrG4sCqnWH2RG0LzP/XN8YkM6eEs2BF9j66ytqA2JIvinAxdtnejaUNHqwiYc
qtXffs8QYye15gCO2aq7bX4N7EH57g2w4aMXlzhWOLBFkD3Q0qL1P3N2i6WyA1iK
YyAhisH3bbHNuJWyxQHjO8ZIBHoZfJqtCqG8ApgFwrxymZWI7dnRxJ7NPGzKiuxr
E5GPeCk5X0hWqENhuXjrqVjD4KQt0lOMNBmaIHlYRwl5DCXRUH+wiEybMycAd++W
b5q0jIxNKv//AgMBAAGjZzBlMB8GA1UdDgQYBBYEFI7WwNj89CcPj52In4ehI7xh
B9Y7MCEGA1UdIwQaMBiAFgQUjtbA2Pz0Jw+PnYifh6EjvGEH1jswDgYDVR0PAQH/
BAQDAgKkMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHic4ute
X+iekxsjujKkHsIzF1cgpK83Pq8uSotyB5gI61vB+fp7frktJmns5sY40ruQ8Cjf
XL8koYqajaxTwThASh+bnkUrdcZsM3a/9kRi7I8zVwERWNF0J9k/yJPCcocvVesz
nS476i8Ywet87gBlU/wtDFGn3aXlpHVt+siAv+wUW5ChfxxyHdVB6dLwdHMmrm3A
pux0KyvM2mnOKu/RACcCesArv/2fBlKxsUXWlRZFa1a60ogY4+6Nfj8B8Wl13gB/
N/K5RU9bviy48bKg3V7ooSKf8eQHB+AiCmhTAUvWe4qXyXW7uF4gtMUGj7aZEg+3
iwSYqK8tnl5RCOA=
-----END CERTIFICATE-----
certificate: |-
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
csr: |-
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----