starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/openstack/install-a-trusted-ca-certificate.rst
Rafael Jardim d6fb867888 Upstreaming WRO 
Removed duplicate abbrev definitions

Signed-off-by: Rafael Jardim <rafaeljordao.jardim@windriver.com>
Change-Id: I7910d9f54e158250004abd7e17a4e119f8064252
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-03-31 08:57:23 -04:00

1.2 KiB
Raw Blame History

Install a Trusted CA Certificate

A trusted certificate can be added to the service containers such that the containerized OpenStack services can validate certificates of far-end systems connecting or being connected to over HTTPS. The most common use case here would be to enable certificate validation of clients connecting to OpenStack service REST API endpoints.

  1. Install a trusted certificate for OpenStack using the following command to override all OpenStack Helm Charts.

    ~(keystone_admin)$ system certificate-install -m openstack_ca <certificate_file>

    where <certificate_file> contains a single certificate to be trusted.

    Running the command again with a different certificate in the file will replace this openstack trusted certificate.

  2. Apply the updated Helm chart overrides containing the certificate changes:

    ~(keystone_admin)$ system application-apply wr-openstack