Inject custom SSL certificates

Inject custom SSL certificatesΒΆ

You can inject any customization scripts and files inside a bootstrap using fuel-bootstrap. For example, you can add custom certificates to access an https repository.

To inject certificate files:

  1. Add a certificate to the Fuel Master system to provide correct work of debootstrap run on the Fuel Master node:

    $ update-ca-trust force-enable
    $ cp cert.crt /etc/pki/ca-trust/source/anchors/
    $ update-ca-trust extract
    
  2. Create a directory with the certificate to inject:

    $ mkdir -p /root/bootstrap_root/usr/local/share/ca-certificates/
    $ cp cert.crt /root/bootstrap_root/usr/local/share/ca-certificates/
    
  3. Build the bootstrap:

    $ fuel-bootstrap build --load-cert --extra-dir /root/bootstrap_root/
    
Creative Commons Attribution 3.0 License

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

Contents