salrashid123 / envoy_control Goto Github PK

certDomains = []string{"www.example.com", "www.hello.com"}

s := []types.Resource{}

for _, cd := range certDomains {
		s = append(s, MakeSecret(cd))
}

resources[resource.SecretType] = s

// Secrets
func MakeSecret(vhost string) *envoy_api_v3_auth.Secret {
	var secretName = strings.Replace(vhost, ".", "_", -1)
	priv, err := ioutil.ReadFile("certs/" + secretName + ".key")
	if err != nil {
		log.Fatal(err)
	}
	pub, err := ioutil.ReadFile("certs/" + secretName + ".cert")
	if err != nil {
		log.Fatal(err)
	}
	log.Infof(">>>>>>>>>>>>>>>>>>> creating Secret " + secretName)
	return &envoy_api_v3_auth.Secret{
		Name: secretName,
		Type: &envoy_api_v3_auth.Secret_TlsCertificate{
			TlsCertificate: &envoy_api_v3_auth.TlsCertificate{
				CertificateChain: &core.DataSource{
					Specifier: &core.DataSource_InlineBytes{InlineBytes: []byte(pub)},
				},
				PrivateKey: &core.DataSource{
					Specifier: &core.DataSource_InlineBytes{InlineBytes: []byte(priv)},
				},
			},
		},
	}
}

INFO[0000] Starting control plane                       
INFO[0000] gateway listening HTTP/1.1                    port=18001
INFO[0000] access log server listening                   port=18090
INFO[0000] management server listening                   port=18000