starlingx/docs
Code Issues Proposed changes

Cluster issuer yaml configuration file reports unknown field "organizations" (pick r6)

Browse Source 
Remove 'organizations' section from cert-manager sample yaml
Add note in TPM topic indicating that its use should be avoided
Incorporate patchset 1 review comments.

Signed-off-by: Ron Stone <ronald.stone@windriver.com>
Change-Id: I6b293d86e2943bf8e505be486cdad536e946337b
This commit is contained in:
Ron Stone 2022-03-04 12:47:08 -05:00
parent 86e221b10f
commit bcd642075c
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/security/kubernetes/secure-starlingx-rest-and-web-certificates-private-key-storage-with-tpm.rst
View File

@ -6,6 +6,13 @@
Secure StarlingX REST and Web Certificate's Private Key Storage with TPM Secure StarlingX REST and Web Certificate's Private Key Storage with TPM
======================================================================== ========================================================================
.. warning::
|TPM| support is deprecated and will be removed in an upcoming release
of |prod|. Users should instead use the procedure in
:ref:`starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834`.
For increased security, the |prod| REST and Web Server's certificate can For increased security, the |prod| REST and Web Server's certificate can
be installed such that the private key is stored in a |TPM| 2.0 device on be installed such that the private key is stored in a |TPM| 2.0 device on
the controller. the controller.

5
doc/source/security/kubernetes/starlingx-rest-api-applications-and-the-web-admin-server-cert-9196c5794834.rst
View File

@ -57,8 +57,6 @@ certificates.
namespace: cert-manager namespace: cert-manager
spec: spec:
subject: subject:
organizations:
- ABC-Company
organizationalUnits: organizationalUnits:
- StarlingX-system-local-ca - StarlingX-system-local-ca
secretName: system-local-ca secretName: system-local-ca
@ -79,6 +77,9 @@ certificates.
secretName: system-local-ca secretName: system-local-ca
EOF EOF
For more information on supported parameters, see
https://cert-manager.io/v0.14-docs/reference/api-docs/#acme.cert-manager.io%2fv1alpha2
#. Apply the configuration. #. Apply the configuration.