diff options
| author |   Vijay VK <vv770d@att.com> | 2018-10-23 16:35:29 +0100 |
|---|---|---|
| committer | VENKATESH KUMAR <vv770d@att.com> | 2018-10-23 12:02:55 -0400 |
| commit | 86cd893e8dbbbd02a1b3209baa6da60337ae417a (patch) | |
| tree | 5d867dcc5dcfdeb46c79dbada9b30a0cb5ce9c53 /docs/sections/tls_enablement.rst | |
| parent | 2133aae7fd41c0d100dbc31ebb5ac2d5456fc15a (diff) | |
dcaegen2 doc updates
Change-Id: I8f0a8a733b6e28fc9d18bed81c9ac4e82c954af8
Signed-off-by: VENKATESH KUMAR <vv770d@att.com>
Issue-ID: DCAEGEN2-573
Diffstat (limited to 'docs/sections/tls_enablement.rst')
| -rw-r--r-- | docs/sections/tls_enablement.rst | 19 |
1 files changed, 9 insertions, 10 deletions
diff --git a/docs/sections/tls_enablement.rst b/docs/sections/tls_enablement.rst index 92556b58..0f75bc88 100644 --- a/docs/sections/tls_enablement.rst +++ b/docs/sections/tls_enablement.rst @@ -14,8 +14,7 @@ Solution overview 2. Plugin and Blueprint: Update blueprint to include new (optional) node property (tls_info) to the type definitions for the Kubernetes component types. The property is a dictionary with two elements: A boolean (use_tls) that indicates whether the com ponent uses TLS. A string (cert_directory) that indicates where the component expects to find certificate artifacts - During deployment Kubernetes plugin (referenced in blueprint) will check if the tls_info property is set and use_tls is set to true, then the plugin will add -some elements to the Kubernetes Deployment for the component: + During deployment Kubernetes plugin (referenced in blueprint) will check if the tls_info property is set and use_tls is set to true, then the plugin will add some elements to the Kubernetes Deployment for the component: * A Kubernetes volume (tls-info) that will hold the certificate artifacts * A Kubernetes initContainer (tls-init) * A Kubernetes volumeMount for the initContainer that mounts the tlsinit volume at /opt/tls/shared. @@ -25,11 +24,11 @@ some elements to the Kubernetes Deployment for the component: 3. Certificate Artifacts The certificate directory m ounted on the container will include the following files: - * cert.jks: A Java keystore containing the DCAE certificate. - * jks.pass: A text file with a single line that contains the password for the cert.jks keystore. - * trust.jks: A Jave truststore containing the AAF CA certificate (needed by clients) - * trust.pass: A text file with a single line that contains the password for the trust.jks keystore. - * cert.p12: The DCAE certificate and private key package in PKCS12 form at. - * p12.pass: A text file with a single line that contains the password for cert.p12 file. - * cert.pem: The DCAE certificate, in PEM form at. - * key.pem: The private key for the DCAE certificate. The key is not encrypted. + - cert.jks: A Java keystore containing the DCAE certificate. + - jks.pass: A text file with a single line that contains the password for the cert.jks keystore. + - trust.jks: A Jave truststore containing the AAF CA certificate (needed by clients) + - trust.pass: A text file with a single line that contains the password for the trust.jks keystore. + - cert.p12: The DCAE certificate and private key package in PKCS12 form at. + - p12.pass: A text file with a single line that contains the password for cert.p12 file. + - cert.pem: The DCAE certificate, in PEM form at. + - key.pem: The private key for the DCAE certificate. The key is not encrypted. |