starlingx/docs
Code Issues Proposed changes

Merge "WRO - Update Install REST API and Horizon Certificate with 2 methods (dsr10, dsr11, r10)"

Browse Source
This commit is contained in:
Zuul 2025-03-28 14:20:23 +00:00 committed by Gerrit Code Review
commit 38668bfa7c
1 changed files with 2 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst
View File

@ -77,37 +77,6 @@ Horizon endpoints by configuring a certificate for these endpoints.
.. rubric:: |proc| .. rubric:: |proc|
**Method 1 (Deprecation warning)**
.. warning::
The following commands for installing the |prefix|-openstack
REST API and Horizon certificate will be removed in future releases. Refer
to Method 2 for the recommended approach.
#. Put the |PEM| encoded versions of the OpenStack certificate and key in
a single file (e.g. ``openstack-cert-key.pem``), and put the certificate of
the Root |CA| in a separate file (e.g. ``openstack-ca-cert.pem``), then
copy the files to the controller host.
#. Install the certificate as the OpenStack REST API / Horizon certificate.
This will automatically update the required OpenStack Helm charts.
.. code-block:: none
~(keystone_admin)$ system ca-certificate-install openstack-ca-cert.pem
~(keystone_admin)$ system os-certificate-install -m server openstack-cert-key.pem
~(keystone_admin)$ system os-certificate-install -m ca openstack-ca-cert.pem
#. Apply the Helm chart overrides containing the certificate changes.
.. parsed-literal::
~(keystone_admin)$ system application-apply |prefix|-openstack
**Method 2 (Recommended)**
#. Put the |PEM| encoded versions of the OpenStack certificate, key, and Root |CA| #. Put the |PEM| encoded versions of the OpenStack certificate, key, and Root |CA|
certificate into separate files (e.g. ``openstack-cert.crt``, ``openstack-cert.key`` certificate into separate files (e.g. ``openstack-cert.crt``, ``openstack-cert.key``
and ``openstak-ca-cert.crt``), and copy the files to the controller host. (e.g. and ``openstak-ca-cert.crt``), and copy the files to the controller host. (e.g.
@ -133,8 +102,6 @@ Horizon endpoints by configuring a certificate for these endpoints.
~(keystone_admin)$ system application-apply |prefix|-openstack ~(keystone_admin)$ system application-apply |prefix|-openstack
.. note:: .. note::
For both methods, ensure port 443 is open in |prod| firewall. For Ensure that port 443 is open in |prod| firewall. For details see |_security-firewall-options|.
details see |_security-firewall-options|.