Root CA installation failed
Hello everyone. I have installed AIO-Simplex on my machine. After successfully installing and configuring the kubernetes and openstack, I was upto configuring openstack access by following this guide "https://docs.starlingx.io/deploy_install_guides/release/openstack/access.htm...". In this process I was at step of "Configure HTTPS Certificate". I have retrieved the certificate and key files. I tried to install the root CA certificate to the host obtained from letsencrypt: "curl -o isrgrootx1.pem https://letsencrypt.org/certs/isrgrootx1.pem" To install ran: "system ca-certificate-install" but got the following error: "Certificate openstack-ca-cert.pem not installed: Expecting value: line 1 column 1 (char 0)". I have also tried to install the root CA certificate through "system os-certificate-install -m ca isrgrootx1.pem" but got the following error: "WARNING: Some certificates were not installed. [Errno 2] No such file or directory: '/opt/platform/config/24.09/openstack/ca-cert.pem' " Actually to install an openstack certificate, the domain has to be added to the service-parameter openstack as prerequisite. So I had added the parameters: "system service-parameter-add openstack Helm endpoint_domain=my-domain.com". After applying stx-openstack application I was expecting the OpenStack Horizon to listen on "horizon.my-stx-domain.mycompany.com:80 (instead of the initial oam‐floating‐ip:31000)" But it didn't. What could specifically go wrong? Did I miss something? I have installed kuberetes on AIO-Simplex and the openstack on top of that. I have used the latest starlingx ISO. I have been following the below given documents to configure and install AIO-simplex kubernetes, Openstack and accessing openstack. https://docs.starlingx.io/deploy_install_guides/release/bare_metal/aio_simpl... ==> To install Kubernetes Platform on All-in-one Simplex https://docs.starlingx.io/deploy_install_guides/release/openstack/access.htm... ==> To configure the starlingx openstack access https://docs.starlingx.io/security/openstack/install-rest-api-and-horizon-ce... ==> To coofigure th starlingx openstack certificate
Hi Bilal and community, This is being discussed in the STX-Openstack Matrix channel (https://matrix.to/#/!ALNJdVPzLBhgSGXwMi:opendev.org/$nYmxSmB1AlqruFTAdtrtEFS3UCNGNHRVSUNFtETHEVA?via=opendev.org&via=matrix.org) but I just wanted to make sure that this is responded in the discussing list. There's currently a bug with STX-Openstack regarding DNS/FQDN configuration: https://bugs.launchpad.net/starlingx/+bug/2080979. If possible, please use an official release version. Thanks, Lucas Barreto | Wind River Cloud Platform Engineer ________________________________ From: bilal.ayyoob.devops@tag.ooo <bilal.ayyoob.devops@tag.ooo> Sent: Monday, September 16, 2024 8:47 PM To: starlingx-discuss@lists.starlingx.io <starlingx-discuss@lists.starlingx.io> Subject: Root CA installation failed CAUTION: This email comes from a non Wind River email account! Do not click links or open attachments unless you recognize the sender and know the content is safe. Hello everyone. I have installed AIO-Simplex on my machine. After successfully installing and configuring the kubernetes and openstack, I was upto configuring openstack access by following this guide "https://docs.starlingx.io/deploy_install_guides/release/openstack/access.htm...". In this process I was at step of "Configure HTTPS Certificate". I have retrieved the certificate and key files. I tried to install the root CA certificate to the host obtained from letsencrypt: "curl -o isrgrootx1.pem https://letsencrypt.org/certs/isrgrootx1.pem" To install ran: "system ca-certificate-install" but got the following error: "Certificate openstack-ca-cert.pem not installed: Expecting value: line 1 column 1 (char 0)". I have also tried to install the root CA certificate through "system os-certificate-install -m ca isrgrootx1.pem" but got the following error: "WARNING: Some certificates were not installed. [Errno 2] No such file or directory: '/opt/platform/config/24.09/openstack/ca-cert.pem' " Actually to install an openstack certificate, the domain has to be added to the service-parameter openstack as prerequisite. So I had added the parameters: "system service-parameter-add openstack Helm endpoint_domain=my-domain.com". After applying stx-openstack application I was expecting the OpenStack Horizon to listen on "horizon.my-stx-domain.mycompany.com:80 (instead of the initial oam‐floating‐ip:31000)" But it didn't. What could specifically go wrong? Did I miss something? I have installed kuberetes on AIO-Simplex and the openstack on top of that. I have used the latest starlingx ISO. I have been following the below given documents to configure and install AIO-simplex kubernetes, Openstack and accessing openstack. https://docs.starlingx.io/deploy_install_guides/release/bare_metal/aio_simpl... ==> To install Kubernetes Platform on All-in-one Simplex https://docs.starlingx.io/deploy_install_guides/release/openstack/access.htm... ==> To configure the starlingx openstack access https://docs.starlingx.io/security/openstack/install-rest-api-and-horizon-ce... ==> To coofigure th starlingx openstack certificate
participants (2)
-
bilal.ayyoob.devops＠tag.ooo
-
De Ataides Barreto, Lucas