docs/doc/source/system_configuration/kubernetes/add-the-ca-certificate-for-new-registry.rst
Adil 8cef686cf8 Added topics upstream for Re-host Upstream Registry
Created new chapter in System Configuration Guide

Acted on Greg's comments

Changed the AWS occurences and hostnames

Fixed merge conflict

https://review.opendev.org/c/starlingx/docs/+/788616

Signed-off-by: Adil <mohamed.adilassakkali@windriver.com>
Change-Id: Id4406152d108326125b32911b7d73e805068cf5e
2021-06-09 15:06:31 -03:00

34 lines
1.3 KiB
ReStructuredText

..
.. _add-the-ca-certificate-for-new-registry:
=======================================
Add the CA Certificate for New Registry
=======================================
.. rubric:: |proc|
#. Copy the certificate of the |CA| that signed the new registries' certificate to the active controller.
#. Install the |CA| certificate as a Trusted |CA| for StarlingX. This is an
example with the filename **ca.crt** containing the |CA| certificate:
.. code-block:: none
system certificate-install -m ssl_ca ca.crt
WARNING: For security reasons, the original certificate,
containing the private key, will be removed,
once the private key is processed.
+-------------+--------------------------------------+
| Property | Value |
+-------------+--------------------------------------+
| uuid | da397ac8-24c2-474c-98fd-5afade15aea2 |
| certtype | ssl_ca |
| signature | ssl_ca_10872957681153283553 |
| start_date | 2020-09-03 21:56:16+00:00 |
| expiry_date | 2021-06-30 21:56:16+00:00 |
+-------------+--------------------------------------+
To verify a new a registry and reapply the application, see :ref:`Check New
Registry and Reapply Application <check-new-registry-and-reapply-application>`.