# IDC Authorization Operations

## Create certficate resource

```shell
export ClientName=qiffang

cat << EOF > cert.yaml
apiVersion: cert-manager.io/v1alpha3
kind: Certificate
metadata:
  name: $ClientName
  namespace: mimir
spec:
  commonName: 307b9851
  duration: 2160h0m0s
  issuerRef:
    group: cert-manager.io
    kind: Issuer
    name: mimir-issuer
  renewBefore: 36h0m0s
  secretName: $ClientName
  subject:
    organizations:
    - PingCAP
  usages:
  - client auth
EOF

kubectl apply -f cert.yaml -n mimir
```

## Get certificate 
```shell
kubectl get secret $ClientName  -n mimir  -ojsonpath={.data.ca\\.crt} | base64 -d  > ca.pem 
kubectl get secret $ClientName  -n mimir  -ojsonpath={.data.tls\\.crt} | base64 -d  > client.pem
kubectl get secret $ClientName  -n mimir  -ojsonpath={.data.tls\\.key} | base64 -d  > client-key.pem  
```

## Send to user
```shell
tar -cvf mimir.tar client.pem client-key.pem ca.pem 
```