From 25263b583e8d60adf93fa9346e1ff449b578d304 Mon Sep 17 00:00:00 2001 From: Ngairangbam Mili Date: Mon, 13 May 2024 06:07:06 +0000 Subject: [PATCH] System commands through remote CLI container not working when HTTPS is enabled Change-Id: Ide10fed9f9f6681566bced9297009e3de459354c Signed-off-by: Ngairangbam Mili --- ...ntainer-backed-remote-clis-and-clients.rst | 27 +++++++++---------- 1 file changed, 13 insertions(+), 14 deletions(-) diff --git a/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst b/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst index 5881d05c7..0b4ccf6ed 100644 --- a/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst +++ b/doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst @@ -119,7 +119,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole. ~(keystone_admin)]$ system oam-show | grep oam_ip | awk '{print $4}' #. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your - |prod| system, execute the following commands to create the |CA| + |prod| system, execute the following commands to get the |CA| certificate and copy it to the remote workstation. .. code-block:: none @@ -138,6 +138,16 @@ CLIs and Clients for an admin user with cluster-admin clusterrole. #. In the remote workstation, do the actions listed below. + #. Create a working directory that will be mounted by the container + implementing the remote |CLIs|. + + See the description of the :command:`configure_client.sh` -w option + below for more details. + + .. code-block:: none + + $ mkdir -p $HOME/remote_cli_wd + #. Copy the remote client tarball file from the |prod| build servers to the remote workstation, and extract its content. @@ -178,10 +188,9 @@ CLIs and Clients for an admin user with cluster-admin clusterrole. .. code-block:: none - export OS_CACERT= + export OS_CACERT="stx.ca.crt" - where ```` is the absolute path of the file ``stx.ca.crt`` - acquired in the steps above. + Copy ``admin-openrc.sh`` to the remote workstation. #. Create an empty admin-kubeconfig file on the remote workstation using the following command. @@ -200,16 +209,6 @@ CLIs and Clients for an admin user with cluster-admin clusterrole. $ cd $HOME/|prefix|-remote-clients-/ - #. Create a working directory that will be mounted by the container - implementing the remote |CLIs|. - - See the description of the :command:`configure_client.sh` -w option - below for more details. - - .. code-block:: none - - $ mkdir -p $HOME/remote_cli_wd - #. Run the :command:`configure_client.sh` script. .. parsed-literal::