starlingx/docs
Code Issues Proposed changes

Recommend 'localhost' always to be targeted by cert-manager migration playbook's execution (rs8, ds8)

Browse Source 
Added info about including localhost in target_list parameter

Change-Id: I65d8173e70e24044dc4dcb64070b9b3b528bb77e
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
This commit is contained in:
Ngairangbam Mili 2023-11-13 04:44:34 +00:00
parent 1f2da97166
commit f3ce4b12e9
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
doc/source/security/kubernetes/migrate-platform-certificates-to-use-cert-manager-c0b1727e4e5d.rst
View File

@ -201,13 +201,18 @@ playbook are:
.. code-block:: none
~(keystone_admin)]$ ansible-playbook /usr/share/ansible/stx-ansible/playbooks/migrate_platform_certificates_to_certmanager.yml -i migration-inventory.yml --extra-vars "target_list=subcloud1 mode=update ignore_alarms=yes" --ask-vault-pass
~(keystone_admin)]$ ansible-playbook /usr/share/ansible/stx-ansible/playbooks/migrate_platform_certificates_to_certmanager.yml -i migration-inventory.yml --extra-vars "target_list=localhost,subcloud1 mode=update ignore_alarms=yes" --ask-vault-pass
.. note::
In |prod-dc| systems, the playbook must be executed from the System
Controller, and the ``target_list`` parameter should be used to target
the desired subclouds.
- In |prod-dc| systems, the playbook must be run from the System
Controller, and the ``target_list`` parameter should be used to target
the desired subclouds.
- The ``target_list`` parameter must include localhost within the
targeted subcloud, to keep the certificates consistent with the
SystemController. In |prod-dc| systems, if localhost is not included
in the ``target_list`` parameter, the playbook can fail to install the
RCA certificate in the SystemController.
The behavior of the update/migration can be customized using the following
``--extra-vars`` parameter options:
@ -221,12 +226,13 @@ playbook are:
the system controller
``target_list``
* ``localhost``: Will target the localhost (standalone systems or
system controller). The ``target_list`` parameter must include at
least this value.
* ``subcloud1``, ``subcloud2``: A comma separated list of hosts the
playbook will target.
* ``localhost``: Will target the localhost (standalone systems or
system controller)
* ``all_online_subclouds``: Will query ``dcmanager subcloud list`` and
retrieve a list of online subclouds to target.