StarlingX NFVI Orchestration
Go to file
Jorge Saffe 9feef4232d sw-manager fails with SSL and CA Cert provided.
When sw-manager is used through a secure connection (https
enabled) either with the remote CLI or within the cluster
via the public interface, the operation fails if the
Certificate Authority's cert is not included among the
system's trusted CAs.

The sw-manager client lacks implemented methods for
referencing a local Certificate Authority Cert during calls.
Therefore, if the CA is not among the system's trusted CAs,
all calls made by sw-manager's CLI will fail since
authentication in Keystone will also fail.

Other CLIs like fm or platform allow referencing a CA Cert
via the "REQUESTS_CA_BUNDLE" environment variable. The fix
involves loading, if defined, the CA Cert referenced by
such an environment variable, and adjusting SSL calls to
verify connections using the provided CA Cert.

Test Plan:
  PASS Fresh Install SX Env

  PASS Source openrc.sh file (internal interface).
  PASS sw-manager patch-strategy show

  PASS Enable secure mode (https)
  PASS Download OpenStack RC File from Horizon.
  PASS Source RC file inside cluster (public interface).
  PASS Set REQUESTS_CA_BUNDLE with CA-Cert path.
  PASS sw-manager patch-strategy show

  PASS Enable secure mode (https)
  PASS Download OpenStack RC File from Horizon.
  PASS Install remote CLI (custom container with changes)
  PASS Source downloaded RC file
  PASS Set REQUESTS_CA_BUNDLE with CA-Cert path.
  PASS sw-manager patch-strategy show

Closes-bug: 2033561

Change-Id: If5b70714cde09bd8c329b976a8148daee9001415
Signed-off-by: Jorge Saffe <jorge.saffe@windriver.com>
2023-08-30 21:43:07 +00:00
api-ref/source Implement system_config_update orchestration 2023-07-17 17:36:44 -04:00
devstack Followup opendev cleanup and test jobs 2019-04-21 14:21:35 -05:00
doc Fix tox-docs failing sphinx 2022-06-03 15:20:56 -03:00
mtce-guest Update debian package versions to use git commits 2023-02-09 17:00:49 +00:00
nfv sw-manager fails with SSL and CA Cert provided. 2023-08-30 21:43:07 +00:00
nova-api-proxy Update debian package versions to use git commits 2023-02-09 17:00:49 +00:00
releasenotes Switch to newer openstackdocstheme and reno versions 2020-06-04 14:34:31 +02:00
.gitignore [Doc] OpenStack API Reference Guide 2018-09-25 14:01:33 -07:00
.gitreview OpenDev Migration Patch 2019-04-19 19:52:26 +00:00
.yamllint Cleanup tox.ini and zuul files from older releases 2023-01-19 15:42:06 +00:00
.zuul.yaml Fix github mirroring for this repo 2023-04-28 12:38:52 -04:00
CONTRIBUTORS.wrs StarlingX open source release updates 2018-05-31 07:36:51 -07:00
LICENSE StarlingX open source release updates 2018-05-31 07:36:51 -07:00
README.rst Followup opendev cleanup and test jobs 2019-04-21 14:21:35 -05:00
centos_build_layer.cfg Build layering, add layer build config file 2019-10-15 19:12:57 +08:00
centos_dev_docker_images.inc Create the stable/dev wheel and image build files 2019-03-21 10:09:02 -04:00
centos_dev_wheels.inc Add NFV wheels to tarball 2019-11-14 10:52:14 -05:00
centos_guest_image.inc Remove wrs-guest-heartbeat SDK Module 2019-04-17 16:34:14 -04:00
centos_guest_image_rt.inc Remove wrs-guest-heartbeat SDK Module 2019-04-17 16:34:14 -04:00
centos_iso_image.inc Remove wrs-server-group SDK Module from StarlingX 2019-03-27 14:01:52 -04:00
centos_pkg_dirs Remove wrs-guest-heartbeat SDK Module 2019-04-17 16:34:14 -04:00
centos_stable_docker_images.inc Create the stable/dev wheel and image build files 2019-03-21 10:09:02 -04:00
centos_stable_wheels.inc Add NFV wheels to tarball 2019-11-14 10:52:14 -05:00
debian_build_layer.cfg Add debian_build_layer.cfg file 2021-10-05 14:10:32 -04:00
debian_iso_image.inc Deactivate guest related services 2023-01-10 17:26:09 -03:00
debian_pkg_dirs Deactivate guest related services 2023-01-10 17:26:09 -03:00
debian_stable_docker_images.inc Port stx-nova-api-proxy image to stx-debian 2023-01-26 07:39:17 -03:00
debian_stable_wheels.inc Port stx-nova-api-proxy image to stx-debian 2023-01-26 07:39:17 -03:00
requirements.txt Adding py27 for nfv 2018-07-10 10:18:28 -05:00
test-requirements.txt Not require recreate of tox env when running tox 2021-04-06 09:48:36 -05:00
tox.ini Convert yaml.load to yaml.safe_load 2023-01-19 19:57:23 +00:00

README.rst

nfv

StarlingX NFVI Orchestration