starlingx/docs
Code Issues Proposed changes

Required SAN parameter for local registry (r6,r7,dsR6,dsR7)

Browse Source 
Added note to clarify floating IPs.
Added MGMT floating IP.
Fixed command.

Signed-off-by: Elisamara Aoki Goncalves <elisamaraaoki.goncalves@windriver.com>
Change-Id: Idc27a997b9c451efe3fb19953eee4670fb6a11b5
(cherry picked from commit a1f82d7f99)
This commit is contained in:
Elisamara Aoki Goncalves
2022-09-06 10:49:46 -03:00
committed by Juanita-Balaraj
parent 61a65d698b
commit 78a6cfa42e
2 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/security/kubernetes/configure-docker-registry-certificate-after-installation-c519edbfe90a.rst
View File

@@ -34,9 +34,9 @@ Update the following fields:
* The ``subject`` fields to identify your particular system.
* The ``ipAddresses`` with the |OAM| Floating IP Address and the MGMT Floating
IP address for this system. Use the :command:`system addrpool-list` command
to get the |OAM| floating IP Address and management floating IP Address for
your system.
IP address for this system which MUST be specified for this certificate. Use
the :command:`system addrpool-list` command to get the |OAM| floating IP
Address and MGMT floating IP Address for your system.
* The ``dnsNames`` with ``registry.local``, ``registry.central`` and any |FQDN|
names configured for this system's |OAM| Floating IP Address in an external
@@ -73,7 +73,6 @@ Update the following fields:
- registry.central
- <external-FQDN-for-OAM-Floating-IP-Address, if applicable>
#. Apply the configuration.
.. code-block::

2
doc/source/security/kubernetes/create-certificates-locally-using-openssl.rst
View File

@@ -49,7 +49,7 @@ use in a lab environment.
.. code-block:: none
$ echo subjectAltName = IP:<WRCP-OAM-Floating-IP>,DNS:registry.local,DNS:registry.central > extfile.cnf
$ echo subjectAltName = IP:<WRCP-OAM-Floating-IP>,IP:<WRCP-MGMT-Floating-IP>,DNS:registry.local,DNS:registry.central > extfile.cnf
#. Use the my-root-ca to sign the server certificate.