Skip to content

Commit

Permalink
Fixes
Browse files Browse the repository at this point in the history
Signed-off-by: Mykola Morhun <mmorhun@redhat.com>
  • Loading branch information
mmorhun committed Dec 11, 2020
1 parent c79c3a8 commit 7148d02
Showing 1 changed file with 2 additions and 21 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ Typical cases that may require this addition are:
* when {prod-short} server or workspace components connect to external services such as {identity-provider} or a Git server that use TLS certificates signed by an untrusted CA.

{prod-short} uses labeled config maps in {prod-short} namespace as sources for TLS certificates.
The config maps can have arbitrary number of data fields with arbitrary number of certificates each.
The config maps can have arbitrary number of keys in data with arbitrary number of certificates each.

[NOTE]
====
Expand Down Expand Up @@ -68,31 +68,12 @@ Or you may create another config map.
+
[subs="+attributes,+quotes"]
----
$ {orch-cli} label configmap custom-certs app.kubernetes.io/part-of=che.eclipse.org -n <{project-context}-namespace-name> && kubectl label configmap custom-certs app.kubernetes.io/component=ca-bundle -n <{project-context}-namespace-name>
$ {orch-cli} label configmap custom-certs app.kubernetes.io/part-of=che.eclipse.org app.kubernetes.io/component=ca-bundle -n <{project-context}-namespace-name>
----

. Wait until rollout of {prod-short} components finishes.
If there are running workspaces, they should be restarted in order the changes take effect.

[NOTE]
====
On {prod-short} version below
ifeval::["{project-context}" == "che"]
v7.20.0
endif::[]
ifeval::["{project-context}" != "che"]
2.5.1
endif::[]
it is required to restart the {prod-short} Operator, the {prod-short} server and {identity-provider} to load the new certificates:
[subs="+attributes,+quotes",options="nowrap",role=white-space-pre]
----
$ kubectl rollout restart -n __<{project-context}-namespace-name>__ deployment/{prod-id-short}-operator
$ kubectl rollout restart -n __<{project-context}-namespace-name>__ deployment/keycloak
$ kubectl rollout restart -n __<{project-context}-namespace-name>__ deployment/{prod-id-short}
----
====

ifeval::["{project-context}" == "che"]

== Adding CA certificates in case of Helm installer
Expand Down

0 comments on commit 7148d02

Please sign in to comment.