#!/bin/bash
# Generator for managed certs for {{ nebula_nodename }}
{{ nebula_bin_dir }}/nebula-cert sign \
  -name "{{ nebula_nodename }}" \
  -ip "{{ nebula_ip | mandatory }}" \
  -groups "{{ nebula_groups | join(',') }}" \
  -ca-key "{{ nebula_config_dir }}/ca.key" \
  -ca-crt "{{ nebula_config_dir }}/ca.crt" \
{% if nebula_cert_public_key is defined %}
  -in-pub "{{ nebula_config_dir }}/{{ nebula_name }}.pub" \
{% else %}
  -out-key "{{ nebula_config_dir }}/{{ nebula_name }}.key" \
{% endif %}
  -out-crt "{{ nebula_config_dir }}/{{ nebula_name }}.crt"