zxp

Follow these steps to update the SSL certificate of the ingress in a Rancher High Availability installation or switch from the default self-signed to a custom certificate:

Create/Update the certificate secret resource

First, concat the server certificate followed by any intermediate certificate(s) to a file named tls.crt and provide the corresponding certificate key in a file named tls.key.

If you are switching the install from using the Rancher generated CA or a Let’s Encrypt issued certificates use the following command to create the tls-rancher-ingress secret resource in your Rancher HA cluster:

$ kubectl -n cattle-system create secret tls tls-rancher-ingress \

Add the following to /etc/pf.anchors/myname:

rdr pass on lo0 inet proto tcp from any to any port 80 -> 127.0.0.1 port 4000
rdr pass on lo0 inet proto tcp from any to any port 443 -> 127.0.0.1 port 4001

Add the following to /etc/pf-myname.conf:

rdr-anchor "forwarding"
load anchor "forwarding" from "/etc/pf.anchors/myname"

Add the following chunk to your existing ISC dhcpd.conf file.

if exists user-class and ( option user-class = "iPXE" ) {
    filename "http://boot.smidsrod.lan/bootstrap.ipxe";
}
else {
    filename "undionly.kpxe";
}

(or see https://gist.github.com/4008017 for a more elaborate setup

	admin account info" filetype:log
	!Host=. intext:enc_UserPassword=* ext:pcf
	"# -FrontPage-" ext:pwd inurl:(service \| authors \| administrators \| users) "# -FrontPage-" inurl:service.pwd
	"AutoCreate=TRUE password=*"
	"http://:@www” domainname
	"index of/" "ws_ftp.ini" "parent directory"
	"liveice configuration file" ext:cfg -site:sourceforge.net
	"parent directory" +proftpdpasswd
	Duclassified" -site:duware.com "DUware All Rights reserved"
	duclassmate" -site:duware.com

	auto eth1
	iface eth1 inet manual
	hwaddress 54:93:59:::**
	pre-up ip l set eth1 address 54:93:59:::**
	post-up dhclient -nw eth1

	interface "eth1" {
	# 发送终端名，这个抓盒子发的包直接送出去就好了，是个32字节的字符串
	send host-name "00109199************************";
	# 发送机顶盒的MAC地址，我的华为的盒子是54:93:59开头的
	send dhcp-client-identifier "\054:93:59:::**";
	# 电信用了Option60验证终端是否为盒子，按照抓包出来的字符串原样发送
	send vendor-class-identifier "SCITV";
	request subnet-mask, rfc3442-classless-static-routes, static-routes,
	routers, domain-name-servers, host-name, domain-name,
	interface-mtu, broadcast-address, ntp-servers,

	#EXTM3U name="四川电信IPTV"
	#EXTINF:-1,CCTV-1高清
	http://192.168.2.2/rtp/239.93.0.184:5140
	#EXTINF:-1,CCTV-2高清
	http://192.168.2.2/rtp/239.93.1.23:6000
	#EXTINF:-1,CCTV-3高清
	http://192.168.2.2/rtp/239.93.1.11:2223
	#EXTINF:-1,CCTV-5高清
	http://192.168.2.2/rtp/239.93.1.12:2224
	#EXTINF:-1,CCTV-6高清

	# 你可以从该 URL 下载这个配置文件: http://surge.run/config-example/ios.conf
	# 用编辑器编辑后，再通过 iTunes, URL, AirDrop 或者 iCloud Drive 复制回 iOS 设备
	# Version 2.0

	[General]
	# 日志等级: warning, notify, info, verbose (默认值: notify)
	loglevel = notify
	# 跳过某个域名或者 IP 段，这些目标主机将不会由 Surge Proxy 处理。(在 macOS
	# 版本中，如果启用了 Set as System Proxy, 那么这些值会被写入到系统网络代理
	# 设置中.)

	var jsoncom = {
	'company': [{
	'companyname': '申通快递',
	'shortname': '申通',
	'tel': '95543',
	'url': 'st',
	'code': 'shentong',
	'hasvali': 0,
	'comurl': 'http://www.sto.cn',
	'isavailable': '0',

	ddns-update-style none;
	deny bootp; #default
	authoritative;

	include "/etc/dhcp/ipxe-option-space.conf";

	# GREEN
	subnet 10.1.1.0 netmask 255.255.255.0 {
	range 10.1.1.100 10.1.1.199;
	option subnet-mask 255.255.255.0;