starlingx/docs
Code Issues Proposed changes

WRO - Update Install REST API and Horizon Certificate with 2 methods (dsr10, dsr11, r10)

Browse Source 
Change-Id: I99901c32fc4e319bf62a7f11fc4774c964f54736
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
(cherry picked from commit d4f19b1fa8dd31d2de381dc1cdeda76a66662845)
This commit is contained in:
Ngairangbam Mili 2025-03-20 13:54:16 +00:00
parent 2cc697843d
commit cb7eb73655
1 changed files with 2 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst
View File

@ -77,37 +77,6 @@ Horizon endpoints by configuring a certificate for these endpoints.
.. rubric:: |proc|
**Method 1 (Deprecation warning)**
.. warning::
The following commands for installing the |prefix|-openstack
REST API and Horizon certificate will be removed in future releases. Refer
to Method 2 for the recommended approach.
#. Put the |PEM| encoded versions of the OpenStack certificate and key in
a single file (e.g. ``openstack-cert-key.pem``), and put the certificate of
the Root |CA| in a separate file (e.g. ``openstack-ca-cert.pem``), then
copy the files to the controller host.
#. Install the certificate as the OpenStack REST API / Horizon certificate.
This will automatically update the required OpenStack Helm charts.
.. code-block:: none
~(keystone_admin)$ system ca-certificate-install openstack-ca-cert.pem
~(keystone_admin)$ system os-certificate-install -m server openstack-cert-key.pem
~(keystone_admin)$ system os-certificate-install -m ca openstack-ca-cert.pem
#. Apply the Helm chart overrides containing the certificate changes.
.. parsed-literal::
~(keystone_admin)$ system application-apply |prefix|-openstack
**Method 2 (Recommended)**
#. Put the |PEM| encoded versions of the OpenStack certificate, key, and Root |CA|
certificate into separate files (e.g. ``openstack-cert.crt``, ``openstack-cert.key``
and ``openstak-ca-cert.crt``), and copy the files to the controller host. (e.g.
@ -133,8 +102,6 @@ Horizon endpoints by configuring a certificate for these endpoints.
~(keystone_admin)$ system application-apply |prefix|-openstack
.. note::
For both methods, ensure port 443 is open in |prod| firewall. For
details see |_security-firewall-options|.
Ensure that port 443 is open in |prod| firewall. For details see |_security-firewall-options|.