From d100904f2c42dea3338e5016c46014ee3132807c Mon Sep 17 00:00:00 2001 From: James Kirsch Date: Mon, 6 Jan 2020 20:39:04 -0800 Subject: Generate self signed TLS certificates Generate both internal and external self signed TLS certificates. Duplicate the certificate if internal and external VIPs are the same. Change-Id: I16b345c0b29ff13e042eed8798efe644e0ad2c74 Partially-Implements: blueprint custom-cacerts --- doc/source/admin/advanced-configuration.rst | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) (limited to 'doc') diff --git a/doc/source/admin/advanced-configuration.rst b/doc/source/admin/advanced-configuration.rst index 9d5b52ed2..765ed2f69 100644 --- a/doc/source/admin/advanced-configuration.rst +++ b/doc/source/admin/advanced-configuration.rst @@ -140,7 +140,7 @@ have settings similar to this: export OS_PASSWORD=demo-password export OS_AUTH_URL=https://mykolla.example.net:5000 # os_cacert is optional for trusted certificates - export OS_CACERT=/etc/pki/mykolla-cacert.crt + export OS_CACERT=/etc/pki/ca/mykolla-cacert.crt export OS_IDENTITY_API_VERSION=3 Self-Signed Certificates @@ -162,8 +162,9 @@ configuration file: kolla-ansible certificates -The files haproxy.pem and haproxy-ca.pem will be generated and stored -in the ``/etc/kolla/certificates/`` directory. +The certificate file haproxy.pem will be generated and stored in the +``/etc/kolla/certificates/`` directory, and the CA cert will be in the +``/etc/kolla/certificates/ca/`` directory. Adding CA Certificates to the Service Containers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- cgit v1.2.3