From d4f19b1fa8dd31d2de381dc1cdeda76a66662845 Mon Sep 17 00:00:00 2001 From: Ngairangbam Mili Date: Thu, 20 Mar 2025 13:54:16 +0000 Subject: [PATCH] WRO - Update Install REST API and Horizon Certificate with 2 methods (dsr10, dsr11, r10) Change-Id: I99901c32fc4e319bf62a7f11fc4774c964f54736 Signed-off-by: Ngairangbam Mili --- ...stall-rest-api-and-horizon-certificate.rst | 37 +------------------ 1 file changed, 2 insertions(+), 35 deletions(-) diff --git a/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst b/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst index 9801a7106..441641c8e 100644 --- a/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst +++ b/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst @@ -77,37 +77,6 @@ Horizon endpoints by configuring a certificate for these endpoints. .. rubric:: |proc| -**Method 1 (Deprecation warning)** - -.. warning:: - - The following commands for installing the |prefix|-openstack - REST API and Horizon certificate will be removed in future releases. Refer - to Method 2 for the recommended approach. - -#. Put the |PEM| encoded versions of the OpenStack certificate and key in - a single file (e.g. ``openstack-cert-key.pem``), and put the certificate of - the Root |CA| in a separate file (e.g. ``openstack-ca-cert.pem``), then - copy the files to the controller host. - -#. Install the certificate as the OpenStack REST API / Horizon certificate. - - This will automatically update the required OpenStack Helm charts. - - .. code-block:: none - - ~(keystone_admin)$ system ca-certificate-install openstack-ca-cert.pem - ~(keystone_admin)$ system os-certificate-install -m server openstack-cert-key.pem - ~(keystone_admin)$ system os-certificate-install -m ca openstack-ca-cert.pem - -#. Apply the Helm chart overrides containing the certificate changes. - - .. parsed-literal:: - - ~(keystone_admin)$ system application-apply |prefix|-openstack - -**Method 2 (Recommended)** - #. Put the |PEM| encoded versions of the OpenStack certificate, key, and Root |CA| certificate into separate files (e.g. ``openstack-cert.crt``, ``openstack-cert.key`` and ``openstak-ca-cert.crt``), and copy the files to the controller host. (e.g. @@ -133,8 +102,6 @@ Horizon endpoints by configuring a certificate for these endpoints. ~(keystone_admin)$ system application-apply |prefix|-openstack - .. note:: - - For both methods, ensure port 443 is open in |prod| firewall. For - details see |_security-firewall-options|. + + Ensure that port 443 is open in |prod| firewall. For details see |_security-firewall-options|.