docs/doc/source/system_configuration/kubernetes/add-the-ca-certificate-for-new-registry.rst
Adil 8cef686cf8 Added topics upstream for Re-host Upstream Registry
Created new chapter in System Configuration Guide

Acted on Greg's comments

Changed the AWS occurences and hostnames

Fixed merge conflict

https://review.opendev.org/c/starlingx/docs/+/788616

Signed-off-by: Adil <mohamed.adilassakkali@windriver.com>
Change-Id: Id4406152d108326125b32911b7d73e805068cf5e
2021-06-09 15:06:31 -03:00

1.3 KiB

Add the CA Certificate for New Registry

  1. Copy the certificate of the that signed the new registries' certificate to the active controller.
  2. Install the certificate as a Trusted for StarlingX. This is an example with the filename ca.crt containing the certificate:
system certificate-install -m ssl_ca ca.crt
WARNING: For security reasons, the original certificate,
containing the private key, will be removed,
once the private key is processed.
+-------------+--------------------------------------+
| Property    | Value                                |
+-------------+--------------------------------------+
| uuid        | da397ac8-24c2-474c-98fd-5afade15aea2 |
| certtype    | ssl_ca                               |
| signature   | ssl_ca_10872957681153283553          |
| start_date  | 2020-09-03 21:56:16+00:00            |
| expiry_date | 2021-06-30 21:56:16+00:00            |
+-------------+--------------------------------------+

To verify a new a registry and reapply the application, see Check New Registry and Reapply Application <check-new-registry-and-reapply-application>.