generate-tls-key

Read/write

Generate an RSA private key + CSR for TLS/mTLS or Kubernetes RBAC

Path: security/tls/generate_key.sh
Language: bash
Category: security/tls
Version: 1.0.0
Size: 3.6 KB
Last modified: May 24, 2026, 12:23 AM

Required binaries

openssl

Environment variables

TLS_OUTPUT_DIR

Run locally

# from the repo root
bash security/tls/generate_key.sh

# or via the ops CLI
ops run security/tls/generate_key.sh

AI operator plan

idle

If the deployment sets PLATPHORM_PROTECT=1, Vercel Authentication is the protection layer and this field may be left blank.

Run in sandbox

ready

Args (space-separated)Operator key (page memory only, optional when hosting protected)Non-secret env (KEY=value per line, optional)

Runs in an isolated Vercel Sandbox (Firecracker microVM, 5 min max, no persistent state). Runs require PLATPHORM_API_KEY unless the deployment sets PLATPHORM_PROTECT=1, where Vercel Authentication is the protection layer. The key stays in component state and is never persisted by this UI.

security/tls/generate_key-v2.sh·bash

create-eks-adminDestructiveDestructive

Create an eks-admin ServiceAccount with cluster-admin ClusterRoleBinding

kubernetes/eks/create-eks-admin.sh·bash

k8seksrbacadmin

aws-get-security-groupRead-onlyRead-only

Inventory security groups (filterable by VPC ID or SG ID) and emit Terraform

aws/inventory/110-get-security-group.sh·bash

awsec2security-groupvpcterraforminventory

iptables-rules-applyDestructiveDestructive

Reset and apply a complete iptables ruleset for a Linux host

bash/network/iptables_rules.sh·bash