starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst
MCamp859 f89156f38e Remove mention to wr-openstack 
Change “wr-openstack” instances to “|prefix|-openstack”.

PS2: Use |prefix| substitution instead of "stx"
PS3, 4, 5, 6, 7: Fix table alignment
PS8: Replace table with text for |prefix| usage

Closes-Bug: 1948045

Change-Id: I41f804dd83d480e99a9c8ebfc252def3de0215ea
Signed-off-by: MCamp859 <maryx.camp@intel.com>
2021-11-03 22:11:16 -04:00

1.5 KiB
Raw Blame History

Install REST API and Horizon Certificate

This certificate must be valid for the domain configured for OpenStack, see the sections on Accessing the System <access-using-the-default-set-up>.

Obtain an Intermediate or Root CA-signed certificate and key from a trusted Intermediate or Root CA. The OpenStack certificate should be created with a wildcard SAN, for example:

X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:*.west2.us.example.com

  1. Put the encoded versions of the OpenStack certificate and key in a single file (e.g. openstack-cert-key.pem), and put the certificate of the Root CA in a separate file (e.g. openstack-ca-cert.pem), and copy the files to the controller host.

  2. Install the certificate as the OpenStack REST API / Horizon Certificate.

    ~(keystone_admin)]$ system certificate-install -m ssl_ca openstack-ca-cert.pem
~(keystone_admin)]$ system certificate-install -m openstack_ca openstack-ca-cert.pem
~(keystone_admin)$ system certificate-install -m openstack openstack-cert-key.pem

  3. Apply the Helm chart overrides containing the certificate changes.

    ~(keystone_admin)$ system application-apply -openstack