From 57390e74efbfb70a1edcb3dd8b18ab8aeebc8d8c Mon Sep 17 00:00:00 2001 From: Elisamara Aoki Goncalves Date: Wed, 11 Sep 2024 13:54:42 +0000 Subject: [PATCH] Remote CLIs and clients Update documentation regarding CLIs. Story: 2009811 Task: 50152 Change-Id: I6307e46efec3a33a1f64e2fbab074f0777c223ee Signed-off-by: Elisamara Aoki Goncalves --- ...e-container-backed-remote-clis-and-clients.rst | 15 +++++++++------ ...g-container-backed-remote-clis-and-clients.rst | 11 +++-------- 2 files changed, 12 insertions(+), 14 deletions(-) diff --git a/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst b/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst index 0b4ccf6ed..5b9419238 100644 --- a/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst +++ b/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst @@ -118,9 +118,11 @@ CLIs and Clients for an admin user with cluster-admin clusterrole. ~(keystone_admin)]$ system oam-show | grep oam_ip | awk '{print $4}' - #. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your - |prod| system, execute the following commands to get the |CA| - certificate and copy it to the remote workstation. + #. Copy the public certificate of the Root |CA| that anchors |prod| REST + API and Web Server's |SSL| certificate to the remote workstation. + + If the certificate in your system is anchored by the platform's issuer + (``system-local-ca``), you can do this using the following commands: .. code-block:: none @@ -182,9 +184,10 @@ CLIs and Clients for an admin user with cluster-admin clusterrole. Cloud Regions** \> **RegionOne** \> and download the **Openstack RC file**. - #. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your - |prod| system, add the following line to the bottom of - ``admin-openrc.sh``: + #. Add the following line to the bottom of ``admin-openrc.sh`` file with + the the filename for the public certificate from the Root |CA| that + anchors |prod| REST API and Web Server's |SSL| certificate in the + remote workstation: .. code-block:: none diff --git a/doc/source/security/kubernetes/using-container-backed-remote-clis-and-clients.rst b/doc/source/security/kubernetes/using-container-backed-remote-clis-and-clients.rst index c9be2cc66..928de3c03 100644 --- a/doc/source/security/kubernetes/using-container-backed-remote-clis-and-clients.rst +++ b/doc/source/security/kubernetes/using-container-backed-remote-clis-and-clients.rst @@ -86,14 +86,9 @@ variables and aliases for the remote |CLI| commands. .. note:: - See the procedure for configuring the |SSL| platform certificate at - :ref:`install-update-the-starlingx-rest-and-web-server-certificate`. - - If HTTPS is enabled for the StarlingX REST API Server on the |prod| - system, copy the certificate of the |CA| that issued/signed the - StarlingX REST API Server's |SSL| certificate to the folder - ``$HOME/remote_wd_cli`` on the remote machine and execute commands as - follows: + Copy the certificate of the Root |CA| that anchors |prod| REST API and + Web Server's |SSL| certificate to the folder ``$HOME/remote_wd_cli`` on + the remote machine and execute commands as follows: * For ``system`` commands: