Description of problem: When trying to apply the SSL part of OSP 7.3 doc, I found two mistakes: 1. Indentation of certificate (SSLCert, SSLKey, CACert) aren't correct. Even with the 'IMPORTANT' note, examples aren't correct. Certificate need one more tabulation. Ex: parameter_defaults: SSLCertificate: | -----BEGIN CERTIFICATE----- Correct way: parameter_defaults: SSLCertificate: | -----BEGIN CERTIFICATE----- 2. In cloudname.yaml file, due to 'DnsServers' parameter, deployment will fail if the param is already set in templates. If we use network-isolation functionalities, DnsServers are already set in network-environment.yaml file. If you add this param in cloudname.yaml file, deployment with fail on Heat validation template with this kind of error, due of duplicate value: Failed to validate: Failed to validate: Value must be valid JSON: Extra data: line 1 column 6 - line 1 column 13 (char 5 - 12)) _dispatch_and_reply /usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py:145 Should be good to add a warning/important note to ensure to have this value only one time. Version-Release number of selected component (if applicable): https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/7/html/Director_Installation_and_Usage/sect-Advanced-Scenario_3_Using_the_CLI_to_Create_an_Advanced_Overcloud_with_Ceph_Nodes.html#sect-Advanced-Enabling_SSL_TLS_on_the_Overcloud How reproducible: Trying to deploy SSL with an existing OSP templates (with network isolation) Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Hi Guillaum, This should now be fixed as a part of the 7.3 release: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/7/html/Director_Installation_and_Usage/sect-Advanced-Scenario_3_Using_the_CLI_to_Create_an_Advanced_Overcloud_with_Ceph_Nodes.html#sect-Advanced-Enabling_SSL_TLS_on_the_Overcloud Closing this BZ.