Command: nomad tls cert create
The tls cert create
command is used to create certificates to be used for
TLS encryption for your Nomad cluster. You can then copy these to your
servers and clients. This command will not automatically update the
configuration of the agents.
Usage
Usage: nomad tls cert create [options]
Command Options
-additional-dnsname=<string>
: Provide an additional dnsname for Subject Alternative Names.localhost
is always included. This flag may be provided multiple times.-additional-ipaddress=<string>
: Provide an additional ipaddress for Subject Alternative Names.127.0.0.1
is always included. This flag may be provided multiple times.-ca=<string>
: Provide path to the ca. Defaults to#DOMAIN#-agent-ca.pem
.-cli
: Generate cli certificate.-client
: Generate client certificate.-days=<int>
: Provide number of days the certificate is valid for from now on. Defaults to 1 year.-cluster-region=<string>
: DEPRECATED please use-region
.-domain=<string>
: Provide the domain. Matters only for-server
certificates.-key=<string>
: Provide path to the key. Defaults to#DOMAIN#-agent-ca-key.pem
.-region=<string>
: Provide the region. Defaults to "global".-server
: Generate server certificate.
Examples
Create a certificate for servers:
Create a certificate for clients:
Create a certificate for the CLI: