starlingx/docs
Code Issues Proposed changes

Merge "Remote CLI: Client container doesn't trust the CA that signed the 'ssl' certificate."

Browse Source
This commit is contained in:
Zuul 2021-06-03 11:12:30 +00:00 committed by Gerrit Code Review
commit 2bf222e02d
1 changed files with 17 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst
View File

@ -172,7 +172,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
to the remote workstation, and extract its content. to the remote workstation, and extract its content.
- The tarball is available from the |prod| area on the StarlingX CENGEN build servers. - The tarball is available from the |prod| area on the |prod| CENGEN build servers.
- You can extract the tarball's contents anywhere on your client system. - You can extract the tarball's contents anywhere on your client system.
@ -196,6 +196,15 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
The file admin-openrc.sh downloads. The file admin-openrc.sh downloads.
#. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your
|prod| system, add the following line to the bottom of admin-openrc.sh:
.. code-block:: none
OS_CACERT=<path_to_ca_>
where ``<path_to_ca>`` is the full filename of the PEM file for the CA
Certificate that signed the |prod| REST APIs Endpoint Certificate.
#. Copy the admin-kubeconfig file to the remote workstation. #. Copy the admin-kubeconfig file to the remote workstation.
@ -242,24 +251,24 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
The options for configure\_client.sh are: The options for configure\_client.sh are:
**-t** ``-t``
The type of client configuration. The options are platform \(for The type of client configuration. The options are platform \(for
|prod-long| |CLI| and clients\) and openstack \(for |prod-os| application |prod-long| |CLI| and clients\) and openstack \(for |prod-os| application
|CLI| and clients\). |CLI| and clients\).
The default value is platform. The default value is platform.
**-r** ``-r``
The user/tenant RC file to use for :command:`openstack` CLI commands. The user/tenant RC file to use for :command:`openstack` CLI commands.
The default value is admin-openrc.sh. The default value is admin-openrc.sh.
**-k** ``-k``
The kubernetes configuration file to use for :command:`kubectl` and :command:`helm` CLI commands. The kubernetes configuration file to use for :command:`kubectl` and :command:`helm` CLI commands.
The default value is temp-kubeconfig. The default value is temp-kubeconfig.
**-o** ``-o``
The remote CLI/client RC file generated by this script. The remote CLI/client RC file generated by this script.
This RC file needs to be sourced in the shell, to setup required This RC file needs to be sourced in the shell, to setup required
@ -270,7 +279,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
remote\_client\_platform.sh. For the openstack application client remote\_client\_platform.sh. For the openstack application client
setup, the default is remote\_client\_app.sh. setup, the default is remote\_client\_app.sh.
**-w** ``-w``
The working directory that will be mounted by the container The working directory that will be mounted by the container
implementing the remote |CLIs|. When using the remote |CLIs|, any files implementing the remote |CLIs|. When using the remote |CLIs|, any files
passed as arguments to the remote |CLI| commands need to be in this passed as arguments to the remote |CLI| commands need to be in this
@ -278,7 +287,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
value is the directory from which the :command:`configure\_client.sh` value is the directory from which the :command:`configure\_client.sh`
command was run. command was run.
**-p** ``-p``
Override the container image for the platform |CLI| and clients. Override the container image for the platform |CLI| and clients.
By default, the platform |CLIs| and clients container image is pulled By default, the platform |CLIs| and clients container image is pulled
@ -298,7 +307,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
perform a :command:`docker login` to that repository before using perform a :command:`docker login` to that repository before using
remote |CLIs|. remote |CLIs|.
**-a** ``-a``
Override the OpenStack application image. Override the OpenStack application image.
By default, the OpenStack |CLIs| and clients container image is pulled By default, the OpenStack |CLIs| and clients container image is pulled