| Summary: | [DOCS] Custom Certificate Configuration Locations Not Precise | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Steven Walter <stwalter> |
| Component: | Documentation | Assignee: | Brandi Munilla <bmcelvee> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Steven Walter <stwalter> |
| Severity: | unspecified | Docs Contact: | Vikram Goyal <vigoyal> |
| Priority: | unspecified | ||
| Version: | 3.3.0 | CC: | aos-bugs, erich, jokerman, mmccomas |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-02-01 16:00:59 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Steven Walter
2016-11-23 19:00:10 UTC
I will work up a PR later today if I get the time. In the meantime I have the answer: You would place the custom cert configuration in assetConfig.servingInfo to have the custom certificate serve up for the web console. You would place the custom cert configuration in servingInfo to have the custom certificate serve up for the CLI and any other api calls from external (such as custom tooling, but the oc tools are the main focus here). You can place the configuration in both sections to have the custom certs served up for both forms of communication; otherwise you will still be using the self-signed OpenShift certs for one or the other. Hi Steven, Thank you for your comment. I'm happy to update this section accordingly. Thanks again, Brandi Hi Steven, Please review pull request 3416 [1] for content. https://github.com/openshift/openshift-docs/pull/3416 Thanks! Brandi I *think* the difference is not in whether it's placed in master vs node, but which section it's in. The pr has it listed that you put it in both places in the master config for the web console, and both places in the node config for the cli; but my understanding is that it should be: assetConfig.servingIngo --> web console servingInfo --> CLI / other api calls I actually dont know why you would put the named certificates in the node config file Thank you for the clarification, Steven. I updated the the PR: https://github.com/openshift/openshift-docs/pull/3416/files. Please take a look when you get a chance. Thanks again! (In reply to Brandi from comment #5) LGTM! Thanks, Steven! Configuring Custom Certificates on the Customer Portal: https://access.redhat.com/documentation/en/openshift-container-platform/3.4/single/installation-and-configuration/#configuring-custom-certificates |