Merge "Remote CLI: Client container doesn't trust the CA that signed the 'ssl' certificate."

doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst

@@ -172,7 +172,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
     to the remote workstation, and extract its content.
 
 
-    -   The tarball is available from the |prod| area on the StarlingX CENGEN build servers.
+    -   The tarball is available from the |prod| area on the |prod| CENGEN build servers.
 
     -   You can extract the tarball's contents anywhere on your client system.
 
@@ -196,6 +196,15 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
 
         The file admin-openrc.sh downloads.
 
+#.  If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your
+    |prod| system, add the following line to the bottom of admin-openrc.sh:
+
+    .. code-block:: none
+
+        OS_CACERT=<path_to_ca_>
+
+    where ``<path_to_ca>`` is the full filename of the PEM file for the CA
+    Certificate that signed the |prod| REST APIs Endpoint Certificate.
 
 #.  Copy the admin-kubeconfig file to the remote workstation.
 
@@ -242,24 +251,24 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
 
         The options for configure\_client.sh are:
 
-    **-t**
+    ``-t``
         The type of client configuration. The options are platform \(for
         |prod-long| |CLI| and clients\) and openstack \(for |prod-os| application
         |CLI| and clients\).
 
         The default value is platform.
 
-    **-r**
+    ``-r``
         The user/tenant RC file to use for :command:`openstack` CLI commands.
 
         The default value is admin-openrc.sh.
 
-    **-k**
+    ``-k``
         The kubernetes configuration file to use for :command:`kubectl` and :command:`helm` CLI commands.
 
         The default value is temp-kubeconfig.
 
-    **-o**
+    ``-o``
         The remote CLI/client RC file generated by this script.
 
         This RC file needs to be sourced in the shell, to setup required
@@ -270,7 +279,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
         remote\_client\_platform.sh. For the openstack application client
         setup, the default is remote\_client\_app.sh.
 
-    **-w**
+    ``-w``
         The working directory that will be mounted by the container
         implementing the remote |CLIs|. When using the remote |CLIs|, any files
         passed as arguments to the remote |CLI| commands need to be in this
@@ -278,7 +287,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
         value is the directory from which the :command:`configure\_client.sh`
         command was run.
 
-    **-p**
+    ``-p``
         Override the container image for the platform |CLI| and clients.
 
         By default, the platform |CLIs| and clients container image is pulled
@@ -298,7 +307,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
         perform a :command:`docker login` to that repository before using
         remote |CLIs|.
 
-    **-a**
+    ``-a``
         Override the OpenStack application image.
 
         By default, the OpenStack |CLIs| and clients container image is pulled