starlingx
/
docs
Code Issues Proposed changes

Merge "Update migration-inventory.yml variable system_root_ca_cert (r6,dsR6,dsR7)" into r/stx.7.0

This commit is contained in:
Zuul 2023-11-29 15:07:04 +00:00 committed by Gerrit Code Review
parent 97e2658671 71de7e2ede
commit 91cbd11ac4
1 changed files with 14 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
doc/source/security/kubernetes/migrate-platform-certificates-to-use-cert-manager-c0b1727e4e5d.rst
View File

@ -59,21 +59,20 @@ controllers/subclouds.
vars:
system_local_ca_cert: <base64_cert>
system_local_ca_key: <base64_key>
system_root_ca_cert: <base64_cert>
root_ca_cert: <base64_cert>
children:
target_group:
vars:
system_platform_certificate:
dns_domain: xyz.com
duration: 2160h # 90d
renewBefore: 360h # 15d
subject_C: CA
subject_ST: Ontario
subject_L: Ottawa
subject_O: myorganization
subject_OU: engineering
subject_CN: myorganization.com
subject_prefix: starlingx2`
dns_domain: xyz.com
duration: 2160h # 90d
renewBefore: 360h # 15d
subject_C: CA
subject_ST: Ontario
subject_L: Ottawa
subject_O: myorganization
subject_OU: engineering
subject_CN: myorganization.com
subject_prefix: starlingx2`
# SSH password to connect to all subclouds
ansible_ssh_user: sysadmin
ansible_ssh_pass: <sysadmin-passwd>
@ -180,9 +179,9 @@ controllers/subclouds.
#. Run the playbook.
The following example illustrates using one set of ssh/sudo passwords for
subcloud1 and subcloud2 and another set of ssh/sudo passwords for
subcloud3.
The following example illustrates using one set of ssh/sudo passwords for
subcloud1 and subcloud2 and another set of ssh/sudo passwords for
subcloud3.
Execute the Ansible playbook to start the migration process. You will be
prompted for the vault password created in the previous step.