starlingx/docs
Code Issues Proposed changes

System commands through remote CLI container not working when HTTPS is enabled

Browse Source 
Change-Id: Ide10fed9f9f6681566bced9297009e3de459354c
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
This commit is contained in:
Ngairangbam Mili
2024-05-13 06:07:06 +00:00
parent 15db7b6a2d
commit 25263b583e
1 changed files with 13 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
doc/source/security/kubernetes/security-configure-container-backed-remote-clis-and-clients.rst
View File

@@ -119,7 +119,7 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
~(keystone_admin)]$ system oam-show | grep oam_ip | awk '{print $4}' ~(keystone_admin)]$ system oam-show | grep oam_ip | awk '{print $4}'
#. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your #. If HTTPS has been enabled for the |prod| RESTAPI Endpoints on your
|prod| system, execute the following commands to create the |CA| |prod| system, execute the following commands to get the |CA|
certificate and copy it to the remote workstation. certificate and copy it to the remote workstation.
.. code-block:: none .. code-block:: none
@@ -138,6 +138,16 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
#. In the remote workstation, do the actions listed below. #. In the remote workstation, do the actions listed below.
#. Create a working directory that will be mounted by the container
implementing the remote |CLIs|.
See the description of the :command:`configure_client.sh` -w option
below for more details.
.. code-block:: none
$ mkdir -p $HOME/remote_cli_wd
#. Copy the remote client tarball file from the |prod| build servers #. Copy the remote client tarball file from the |prod| build servers
to the remote workstation, and extract its content. to the remote workstation, and extract its content.
@@ -178,10 +188,9 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
.. code-block:: none .. code-block:: none
export OS_CACERT=<path_to_ca> export OS_CACERT="stx.ca.crt"
where ``<path_to_ca>`` is the absolute path of the file ``stx.ca.crt`` Copy ``admin-openrc.sh`` to the remote workstation.
acquired in the steps above.
#. Create an empty admin-kubeconfig file on the remote workstation using #. Create an empty admin-kubeconfig file on the remote workstation using
the following command. the following command.
@@ -200,16 +209,6 @@ CLIs and Clients for an admin user with cluster-admin clusterrole.
$ cd $HOME/|prefix|-remote-clients-<version>/ $ cd $HOME/|prefix|-remote-clients-<version>/
#. Create a working directory that will be mounted by the container
implementing the remote |CLIs|.
See the description of the :command:`configure_client.sh` -w option
below for more details.
.. code-block:: none
$ mkdir -p $HOME/remote_cli_wd
#. Run the :command:`configure_client.sh` script. #. Run the :command:`configure_client.sh` script.
.. parsed-literal:: .. parsed-literal::