starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/openstack/install-rest-api-and-horizon-certificate.rst
Ron Stone d8d90b4d75 Install conditionalizations 
OVS related deployment conditionalizations.
Patchset 1 review updates.
Updates based on additional inputs.
Patchset 3 review updates.
Fixed some unexpanded substitutions and formatting issues throughout.
Patchset 5 updates.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: Ib86bf0e13236a40f7a472d4448a9b2d3cc165deb
Signed-off-by: Ron Stone <ronald.stone@windriver.com>

Reorg OpenStack installion for DS consumption

This review replaces https://review.opendev.org/c/starlingx/docs/+/801130

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: Iab9c8d56cff9c1bc57e7e09fb3ceef7cf626edad
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-07-22 19:59:01 -04:00

1.4 KiB
Raw Blame History

Install REST API and Horizon Certificate

This certificate must be valid for the domain configured for OpenStack, see the sections on Accessing the System <access-using-the-default-set-up>.

Before installing the openstack certificate and key, you must install the ROOT for the openstack certificate as a trusted ca, Install a Trusted CA Certificate <install-a-trusted-ca-certificate>.

  1. Install the certificate for OpenStack as Helm chart overrides.

    ~(keystone_admin)$ system certificate-install -m openstack <certificate_file>

    where <certificate_file> is a pem file containing both the certificate and private key.

    Note

    The OpenStack certificate must be created with wildcard .

    For example, to create a certificate for : west2.us.example.com, the following entry must be included in the certificate:

    X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:*.west2.us.example.com

  2. Apply the Helm chart overrides containing the certificate changes.

    ~(keystone_admin)$ system application-apply wr-openstack