Hi Bilal and community,

This is being discussed in the STX-Openstack Matrix channel (https://matrix.to/#/!ALNJdVPzLBhgSGXwMi:opendev.org/$nYmxSmB1AlqruFTAdtrtEFS3UCNGNHRVSUNFtETHEVA?via=opendev.org&via=matrix.org) but I just wanted to make sure that this is responded in the discussing list.

There's currently a bug with STX-Openstack regarding DNS/FQDN configuration: https://bugs.launchpad.net/starlingx/+bug/2080979. If possible, please use an official release version.

Thanks,

Lucas Barreto | Wind River

Cloud Platform Engineer

From: bilal.ayyoob.devops@tag.ooo <bilal.ayyoob.devops@tag.ooo>
Sent: Monday, September 16, 2024 8:47 PM
To: starlingx-discuss@lists.starlingx.io <starlingx-discuss@lists.starlingx.io>
Subject: Root CA installation failed
 
CAUTION: This email comes from a non Wind River email account!
Do not click links or open attachments unless you recognize the sender and know the content is safe.

Hello everyone.
I have installed AIO-Simplex on my machine. After successfully installing and configuring the kubernetes and openstack, I was upto configuring openstack access by following this guide "https://docs.starlingx.io/deploy_install_guides/release/openstack/access.html#configure-https-certificate". In this process I was at step of "Configure HTTPS Certificate".
I have retrieved the certificate and key files.

I tried to install the root CA certificate to the host obtained from letsencrypt:
"curl -o isrgrootx1.pem https://letsencrypt.org/certs/isrgrootx1.pem"
To install ran: "system ca-certificate-install" but got the following error: "Certificate openstack-ca-cert.pem not installed: Expecting value: line 1 column 1 (char 0)".

I have also tried to install the root CA certificate through "system os-certificate-install -m ca isrgrootx1.pem" but got the following error: "WARNING: Some certificates were not installed.
[Errno 2] No such file or directory: '/opt/platform/config/24.09/openstack/ca-cert.pem' "

Actually to install an openstack certificate, the domain has to be added to the service-parameter openstack as prerequisite. So I had added the parameters: "system service-parameter-add openstack Helm endpoint_domain=my-domain.com". After applying stx-openstack application I was expecting the OpenStack Horizon to listen on "horizon.my-stx-domain.mycompany.com:80 (instead of the initial oam‐floating‐ip:31000)"

But it didn't. What could specifically go wrong? Did I miss something?
I have installed kuberetes on AIO-Simplex and the openstack on top of that. I have used the latest starlingx ISO.
I have been following the below given documents to configure and install AIO-simplex kubernetes, Openstack and accessing openstack.

https://docs.starlingx.io/deploy_install_guides/release/bare_metal/aio_simplex_install_kubernetes.html ==> To install Kubernetes Platform on All-in-one Simplex
https://docs.starlingx.io/deploy_install_guides/release/openstack/access.html ==> To configure the starlingx openstack access
https://docs.starlingx.io/security/openstack/install-rest-api-and-horizon-certificate.html#install-rest-api-and-horizon-certificate ==> To coofigure th starlingx openstack certificate