[docs] update ssl certificate on deployed cluester

Bug #1541944 reported by Oleksii Aleksieiev
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Confirmed
Medium
Fuel Documentation Team
Mitaka
Won't Fix
Medium
Fuel Documentation Team
Newton
Confirmed
Medium
Fuel Documentation Team

Bug Description

Operation guide should updated with description how to update ssl certificate on deployed cluster.

Fuel web ui inMOS 7.0 does not support updating the certificate on deployed cluster.

At the moment the only way to update ssl on deployed MOD 7.0 is:

1 Replace /var/lib/astute/haproxy/public_haproxy.pem certificate on each controller node.
2 Restart haproxy:

crm resource restart p_haproxy

Unfortunately the old certificate is still stored in fuel database so if you add/rebuild the controller or redeploy the environment the old certificate will be deployed.

The LP bug 1491805 describes problem with updating certificate on fuel node.

Changed in fuel:
assignee: nobody → Fuel Documentation Team (fuel-docs)
milestone: none → 9.0
status: New → Confirmed
importance: Undecided → Medium
tags: added: area-docs
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.