starlingx/docs
Code Issues Proposed changes

System commands through remote CLI container not working when HTTPS is enabled

Browse Source 
Change-Id: Ide10fed9f9f6681566bced9297009e3de459354c
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
This commit is contained in:
Ngairangbam Mili 2024-05-13 06:07:06 +00:00
parent 15db7b6a2d
commit 25263b583e
1 changed files with 13 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst
View File

@ -119,7 +119,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
~(keystone_admin)]$ system oam-show | grep oam_ip | awk '{print $4}'
#. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your
|prod| system, execute the following commands to create the |CA|
|prod| system, execute the following commands to get the |CA|
certificate and copy it to the remote workstation.
.. code-block:: none
@ -138,6 +138,16 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
#. In the remote workstation, do the actions listed below.
#. Create a working directory that will be mounted by the container
implementing the remote |CLIs|.
See the description of the :command:`configure_client.sh` -w option
below for more details.
.. code-block:: none
$ mkdir -p $HOME/remote_cli_wd
#. Copy the remote client tarball file from the |prod| build servers
to the remote workstation, and extract its content.
@ -178,10 +188,9 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
.. code-block:: none
export OS_CACERT=<path_to_ca>
export OS_CACERT="stx.ca.crt"
where ``<path_to_ca>`` is the absolute path of the file ``stx.ca.crt``
acquired in the steps above.
Copy ``admin-openrc.sh`` to the remote workstation.
#. Create an empty admin-kubeconfig file on the remote workstation using
the following command.
@ -200,16 +209,6 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
$ cd $HOME/|prefix|-remote-clients-<version>/
#. Create a working directory that will be mounted by the container
implementing the remote |CLIs|.
See the description of the :command:`configure_client.sh` -w option
below for more details.
.. code-block:: none
$ mkdir -p $HOME/remote_cli_wd
#. Run the :command:`configure_client.sh` script.
.. parsed-literal::