starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/openstack/install-a-trusted-ca-certificate.rst
Ron Stone 1dd81523ff DS openstack updates 
Changes required to support downstream openstack reuse.
Resolved merge conflict.
security/openstack/index adjustment.
Patchset 3 updates.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I981379d1dedcc2649a6035a0302ef8a838c35433
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-07-23 07:01:18 -04:00

1.2 KiB
Raw Blame History

Install a Trusted CA Certificate

A trusted certificate can be added to the service containers such that the containerized OpenStack services can validate certificates of far-end systems connecting or being connected to over HTTPS. This is commonly done to enable certificate validation of clients connecting to OpenStack service REST API endpoints.

  1. Install a trusted certificate for OpenStack using the following command to override all OpenStack Helm Charts.

    ~(keystone_admin)$ system certificate-install -m openstack_ca <certificate_file>

    where <certificate_file> contains a single certificate to be trusted.

    Running the command again with a different certificate in the file will replace this openstack trusted certificate.

  2. Apply the updated Helm chart overrides containing the certificate changes:

    ~(keystone_admin)$ system application-apply wr-openstack