feat(casan): establish assurance kernel and harden control plane

2026-08-02 23:24:51 +07:00
parent 8b477f3800
commit 5745519126
51 changed files with 4076 additions and 180 deletions
@@ -17,6 +17,14 @@ if [[ ! -f "$TLS_DIR/tls.crt" || ! -f "$TLS_DIR/tls.key" ]]; then
    -subj "/CN=localhost" \
    -days 1 >/dev/null 2>&1
 fi
+IDP_PRIVATE="$ROOT/tmp/control-panel-local/idp-private.pem"
+IDP_PUBLIC="$ROOT/tmp/control-panel-local/idp-public.pem"
+if [[ ! -f "$IDP_PRIVATE" || ! -f "$IDP_PUBLIC" ]]; then
+  openssl genrsa -out "$IDP_PRIVATE" 2048 >/dev/null 2>&1
+  openssl rsa -in "$IDP_PRIVATE" -pubout -out "$IDP_PUBLIC" >/dev/null 2>&1
+  chmod 0600 "$IDP_PRIVATE"
+  chmod 0644 "$IDP_PUBLIC"
+fi

 cleanup() {
  docker compose -f "$COMPOSE" down --remove-orphans >/dev/null 2>&1 || true