starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst
Rafael Jardim d6fb867888 Upstreaming WRO 
Removed duplicate abbrev definitions

Signed-off-by: Rafael Jardim <rafaeljordao.jardim@windriver.com>
Change-Id: I7910d9f54e158250004abd7e17a4e119f8064252
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-03-31 08:57:23 -04:00

1.2 KiB
Raw Blame History

Install REST API and Horizon Certificate

This certificate must be valid for the domain configured for OpenStack, see the sections on Accessing the System <access-using-the-default-set-up>.

  1. Install the certificate for OpenStack as Helm chart overrides.

    ~(keystone_admin)$ system certificate-install -m openstack <certificate_file>

    where <certificate_file> is a pem file containing both the certificate and private key.

    Note

    The OpenStack certificate must be created with wildcard SAN.

    For example, to create a certificate for : west2.us.example.com, the following entry must be included in the certificate:

    X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:*.west2.us.example.com

  2. Apply the Helm chart overrides containing the certificate changes.

    ~(keystone_admin)$ system application-apply wr-openstack