Hello,
I too have a problem using custom cert with OCP provisioning on oVirt
I followed the following documentation to update the default cert with my letsencrypt one :
This documentation is similar to the one linked by Yedidyah Bar David : https://www.ovirt.org/documentation/administration_guide/index.html#appe-Red_Hat_Enterprise_Virtualization_and_SSL
After following these steps, I can verify in my browser that the engine is now behind the new custom certificate from letsencrypt.
However, the old certificate is still served by the url : https://engine.fqdn/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA
When running openshift-install create install-config, the certificate that is automaticlly retrived from engine.fqdn:443 is the old one, not the new custom one.
Are there missing steps in the above procedures?
Best,
Guillaume Pavese
Ingénieur Système et Réseau
Ingénieur Système et Réseau
Interactiv-Group
On Tue, Jan 25, 2022 at 1:57 AM Sandro Bonazzola <sbonazzo@redhat.com> wrote:
_______________________________________________Il giorno dom 23 gen 2022 alle ore 08:15 Eric Tiquet <eric.tiquet@gmail.com> ha scritto:Hello community,
Would like to use ovirt & openshift, a this might be trivial but I am juste blocked at 'step two'.
(As openshift refuse to use the ovirt without valid certificates and the insecure workaround does'not work)
I can't find any usefull information to setup the UI/API certificates. ( ex: there is no apache...)
Could someone please point me to the correct tuto's or instruction ?This is the development mailing list. For looking for help on oVirt, I recommend asking on user mailing list instead: https://lists.ovirt.org/archives/list/users@ovirt.org/ .I assume you are following https://docs.okd.io/4.9/installing/installing_rhv/installing-rhv-default.htmlIf the documentation there is not clear enough, I would recommend opening an issue on https://github.com/openshift/openshift-docs/issues or discussing it on https://github.com/openshift/okd/discussions
With kind regards,
Eric
_______________________________________________
Devel mailing list -- devel@ovirt.org
To unsubscribe send an email to devel-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/devel@ovirt.org/message/A6S264FUJVUNOPGQAA73Y54CWTM6FVJ3/
--Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours.
Devel mailing list -- devel@ovirt.org
To unsubscribe send an email to devel-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/devel@ovirt.org/message/Y4XAESPURFI2T3NW34QJUHARWWC3UIPQ/
