From a66dbaf20f83c68dc7fed4f97acea638bbb0a19d Mon Sep 17 00:00:00 2001 From: reachableceo Date: Fri, 4 Sep 2026 17:30:39 -0500 Subject: [PATCH] =?UTF-8?q?feat(ca):=20step-ca=20ACME=20pilot=20=E2=80=94?= =?UTF-8?q?=20mechanics=20verified=20e2e=20with=20lego=20[#697]?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit test-root container pilot (loopback+bridge binds); HTTP-01 issuance proven; phase design for prod ACME/k8s/SSH on t/327#2. https://community.turnsys.com/t/327/2 --- docker/stepca-test/compose.yaml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 docker/stepca-test/compose.yaml diff --git a/docker/stepca-test/compose.yaml b/docker/stepca-test/compose.yaml new file mode 100644 index 0000000..81fbece --- /dev/null +++ b/docker/stepca-test/compose.yaml @@ -0,0 +1,20 @@ +# step-ca ACME endpoint — TEST PILOT (workstation loopback + tailnet) [#697] +# Real-root intermediate integration is a later phase (t/327 design). +services: + stepca: + image: smallstep/step-ca:0.30.2 + container_name: ca-stepca-test + extra_hosts: + - "ultix-streaming.knel.net:host-gateway" + restart: "no" + ports: + - "127.0.0.1:8443:9000" + - "172.17.0.1:8443:9000" + volumes: + - data:/home/step + environment: + DOCKER_STEPCA_INIT_NAME: "KNEL CA Test Pilot" + DOCKER_STEPCA_INIT_DNS_NAMES: "localhost,tsys-ca.knel.net" + DOCKER_STEPCA_INIT_PROVISIONER_NAME: "admin" +volumes: + data: