StarlingX Distributed Cloud
fbda476631
The sysinv API call for certificate installation with type openldap_ca will extract ca data included in the certificate bundle and include it in the 'system-local-ca' ca.crt field. Modified dcmanager to perform the call using this structure, passing a bundle with TLS cert + CA cert + TLS key from the 'system-local-ca' in the SystemController. This code is called during DX subcloud upgrade and is used to keep the current 'system-local-ca' on the subcloud consistent with the one in the SystemController. Test plan: PASS: In a DC w/ DX subcloud in stx 9: - Perform cert-manager migration. - Upgrade the SystemController. - Verify system-local-ca secret content in the SystemController and the subcloud. - Start orchestrated upgraded for th DX subcloud. - Verify dcmanager/state.log. After the step "Stage: 2, State: transferring CA certificate" verify the system-local-ca secret content in the subcloud. The secret should have been replaced to match the one in the SystemController. Story: 2009811 Task: 49044 Change-Id: I42e6308f066126f903738f4e3c319c6027c8cb0b Signed-off-by: Marcelo Loebens <Marcelo.DeCastroLoebens@windriver.com> |
||
---|---|---|
api-ref/source | ||
distributedcloud | ||
doc | ||
python/python3-redfish/debian | ||
releasenotes | ||
tools/gate | ||
.gitignore | ||
.gitreview | ||
.mailmap | ||
.zuul.yaml | ||
bindep.txt | ||
centos_build_layer.cfg | ||
centos_dev_docker_images.inc | ||
centos_dev_wheels.inc | ||
centos_iso_image.inc | ||
centos_pkg_dirs | ||
centos_stable_docker_images.inc | ||
centos_stable_wheels.inc | ||
CONTRIBUTING.rst | ||
CONTRIBUTORS.wrs | ||
debian_build_layer.cfg | ||
debian_dev_docker_images.inc | ||
debian_dev_wheels.inc | ||
debian_iso_image.inc | ||
debian_pkg_dirs | ||
debian_stable_docker_images.inc | ||
debian_stable_wheels.inc | ||
HACKING.rst | ||
README_DC | ||
tox.ini |