Skip to content

Commit

Permalink
Update the documentation about importing untrusted certificates (#1598)
Browse files Browse the repository at this point in the history
* First changes
* Split the procedure into 2 sections according to whether the certificates are added:
  - at installation time
  - on an already-running installation.
* Add changes proposed by @l0rd
* Change the title according to @l0rd review comment
* Fix comment #1598 (review)
* Add verification steps at the workspace level
* Fix some of the vale errors

Co-authored-by: Mario Loriedo <mario.loriedo@gmail.com>
Co-authored-by: Yana Hontyk <yhontyk@redhat.com>
  • Loading branch information
3 people committed Dec 2, 2020
1 parent 2c8166e commit aff1be8
Show file tree
Hide file tree
Showing 7 changed files with 319 additions and 120 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
. Save the certificates you need to import, to a local file system.
+
[CAUTION]
====
* Certificate files are typically stored as Base64 ASCII files, such as `.pem`, `.crt`, `.ca-bundle`. But, they can also be binary-encoded, for example, as `.cer` files. All Secrets that hold certificate files should use the Base64 ASCII certificate rather than the binary-encoded certificate.
* {prod-short} already uses some reserved file names to automatically inject certificates into the ConfigMap, so you should avoid using the following reserved file names to save your certificates:
** `ca-bundle.crt`
** `ca.crt`
====
3 changes: 2 additions & 1 deletion modules/installation-guide/nav.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,8 @@
** xref:deploying-che-with-support-for-git-repositories-with-self-signed-certificates.adoc[]
** xref:installing-che-using-storage-classes.adoc[]
** xref:configuring-storage-types.adoc[]
** xref:importing-tls-certificates-to-che-server-java-truststore.adoc[]
** xref:importing-untrusted-tls-certificates.adoc[]
** xref:switching-between-external-and-internal-communication.adoc[]
* xref:upgrading-che.adoc[]
Expand Down

This file was deleted.

Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
[id="importing-untrusted-tls-certificates"]
// = Importing untrusted TLS certificates
:navtitle: Importing untrusted TLS certificates to {prod-short}
:keywords: installation-guide, tls, certificate
:page-aliases: .:importing-untrusted-tls-certificates

include::partial$proc_importing-untrusted-tls-certificates.adoc[]
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ The next sections describe some specific user stories.

* xref:configuring-storage-types.adoc[]

* xref:importing-tls-certificates-to-che-server-java-truststore.adoc[]
* xref:importing-untrusted-tls-certificates.adoc[]


:context: {parent-context-of-configuring-che}

This file was deleted.

Loading

0 comments on commit aff1be8

Please sign in to comment.