starlingx/docs
Code Issues Proposed changes

Certificate changes from R8 fixed in master

Browse Source 
Original master review: https://review.opendev.org/c/starlingx/docs/+/894499

Change-Id: Ibf683df7b5d426d17846eec3824dd86ef3ccf0e0
Signed-off-by: Ngairangbam Mili <ngairangbam.mili@windriver.com>
This commit is contained in:
Ngairangbam Mili
2023-11-02 13:58:04 +00:00
parent 591824df28
commit 67e324da18
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
doc/source/security/kubernetes/https-access-overview.rst
View File

@@ -117,7 +117,8 @@ present on |DC| SystemController systems or |DC| Subclouds.
+---------------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------+
| DC-AdminEp-Server | On SystemController, it is called dc-adminep-certificate. On subcloud, it is called sc-adminep-certificate signed by interCA. | Yes | auto-renewed |
+---------------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------+
| **System trusted CA Certificates/ssl_ca** | The |CA| certificate that issues the SSL certificates | No | NOT AUTO-RENEWED as these are certificates that are not necessarily owned by the platform |
| **System trusted CA Certificates (ssl_ca)** | One or more (typically external) |CA| certificates to identify remote servers. Example: when using an external Container Registry, the certificate of the | No | NOT AUTO-RENEWED as these are certificates that are not necessarily owned by the platform |
| | |CA| that signed the external Container Registry's certificate must be configured to validate the identity of the external Container Regsitry. | | |
+---------------------------------------------------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------+------------------------------------------------------------------------------+----------------------------------------------------------------------------------------------------------+
Where: