From 5b36a011c0c39a0b816686a203267dd503c2b235 Mon Sep 17 00:00:00 2001 From: Juanita-Balaraj Date: Wed, 1 Jun 2022 14:53:14 -0400 Subject: [PATCH] Added notes in "Configure Remote CLIs", "Use Container-backed Remote CLIs and Clients" (r6) Updated Patchset 1 comments Signed-off-by: Juanita-Balaraj Change-Id: Ibb4a6064ce1fc2228da64ea10a2b485de0a6aa53 --- ...ontainer-backed-remote-clis-and-clients.rst | 9 +++++++++ .../configure-remote-clis-and-clients.rst | 18 ++++++++++++++++-- 2 files changed, 25 insertions(+), 2 deletions(-) diff --git a/doc/source/security/openstack/config-and-management-using-container-backed-remote-clis-and-clients.rst b/doc/source/security/openstack/config-and-management-using-container-backed-remote-clis-and-clients.rst index 63c77f87a..abadccaa0 100644 --- a/doc/source/security/openstack/config-and-management-using-container-backed-remote-clis-and-clients.rst +++ b/doc/source/security/openstack/config-and-management-using-container-backed-remote-clis-and-clients.rst @@ -14,6 +14,15 @@ variables and aliases for the remote |CLI| commands. For a Distributed Cloud system, navigate to **Project** \> **Central Cloud Regions** \> **RegionOne** \> and download the **Openstack RC file**. +.. note:: + If the |prod-os| system has HTTPS certificate enabled, another option + for running OpenStack commands is to add the ``--insecure`` parameter. + + .. code-block:: + + $ openstack image list --insecure + + .. rubric:: |context| .. note:: diff --git a/doc/source/security/openstack/configure-remote-clis-and-clients.rst b/doc/source/security/openstack/configure-remote-clis-and-clients.rst index 21eee9170..feced3da0 100644 --- a/doc/source/security/openstack/configure-remote-clis-and-clients.rst +++ b/doc/source/security/openstack/configure-remote-clis-and-clients.rst @@ -62,6 +62,21 @@ The following procedure shows how to configure the Container-backed Remote #. Download the user/tenant **openrc** file from the |os-prod-hor-long| to the remote workstation. + .. note:: + + If the |prod-os| system has HTTPS certificate enabled, use the + following steps: + + #. Download the certificate file (**ca-bundle.trust.crt**) from the + /etc/pki/tls/certs/ directory on the |prod-os| system, and copy the + file to your remote workstation to the same directory as the + admin-openrc.sh file. + + #. Update the admin-openrc.sh file with the following: + + .. code-block:: none + + export OS_CACERT=ca-bundle.trust.crt #. Log in to |os-prod-hor| interface as the user and tenant that you want to configure remote access for. @@ -101,7 +116,7 @@ The following procedure shows how to configure the Container-backed Remote :: - $ ./configure_client.sh -t openstack -r admin-openrc.sh -w $HOME/remote_cli_wd + $ ./configure_client.sh -t openstack -r admin-openrc.sh -w $HOME/remote_cli_wd -a /docker.io/starlingx/wr-openstackclients: .. only:: partner @@ -185,4 +200,3 @@ variables and aliases for the remote |CLI| commands. See :ref:`Use Container-backed Remote CLIs and Clients ` for details. -