openstack/tripleo-docs
Code Issues Proposed changes

Add note about ssl ca for minion

Browse Source 
If the undercloud is configured with ssl, especially the self signed
cert, we need to copy the CA to the minion for functions to work
correctly. We currently don't have this built into the minion
installation so let's handle this with documentation at this time.

Change-Id: I1760a5251df7aba535dfa0fc362fb0100f0f588a
This commit is contained in:
Alex Schultz 2019-12-05 15:33:15 -07:00
parent c7c7913aa9
commit b590fdb2ca
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
deploy-guide/source/features/undercloud_minion.rst
View File

@ -71,6 +71,18 @@ Installation Steps
scp tripleo-undercloud-outputs.yaml tripleo-undercloud-passwords.yaml <non-root-user>@<minion-machine>:
#. (Optional) Copy Undercloud CA certificate if SSL is enabled.
On the undercloud::
scp /etc/pki/ca-trust/source/anchors/cm-local-ca.pem <non-root-user>@<minion-machine>:
On the minion::
sudo update-ca-trust enable
sudo cp cm-local-ca.pem /etc/pki/ca-trust/source/anchors/undercloud-ca.pem
sudo update-ca-trust extract
#. Prepare the configuration file::
cp /usr/share/python-tripleoclient/minion.conf.sample ~/minion.conf