Hello,
I too have a problem using custom cert with OCP provisioning on oVirt

I followed the following documentation to update the default cert with my
letsencrypt one :

https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl

This documentation is similar to the one linked by Yedidyah Bar David :
https://www.ovirt.org/documentation/administration_guide/index.html#appe-Red_Hat_Enterprise_Virtualization_and_SSL

After following these steps, I can verify in my browser that the engine is
now behind the new custom certificate from letsencrypt.

However, the old certificate is still served by the url :
https://engine.fqdn/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA

When running openshift-install create install-config, the certificate that
is automaticlly retrived from engine.fqdn:443 is the old one, not the new
custom one.

Are there missing steps in the above procedures?

Best,

Guillaume Pavese
Ingénieur Système et Réseau
Interactiv-Group


On Tue, Jan 25, 2022 at 1:57 AM Sandro Bonazzola <sbona...@redhat.com>
wrote:

>
>
> Il giorno dom 23 gen 2022 alle ore 08:15 Eric Tiquet <
> eric.tiq...@gmail.com> ha scritto:
>
>> Hello community,
>> Would like to use ovirt & openshift, a this might be trivial but I am
>> juste blocked at 'step two'.
>> (As openshift refuse to use the ovirt without valid certificates and the
>> insecure workaround does'not work)
>>
>> I can't find any usefull information to setup the UI/API certificates. (
>> ex: there is no apache...)
>> Could someone please point me to the correct tuto's or instruction ?
>>
>
> This is the development mailing list. For looking for help on oVirt, I
> recommend asking on user mailing list instead:
> https://lists.ovirt.org/archives/list/users@ovirt.org/ .
> I assume you are following
> https://docs.okd.io/4.9/installing/installing_rhv/installing-rhv-default.html
>
> If the documentation there is not clear enough, I would recommend opening
> an issue on https://github.com/openshift/openshift-docs/issues or
> discussing it on https://github.com/openshift/okd/discussions
>
>
>
>>
>> With kind regards,
>> Eric
>> _______________________________________________
>> Devel mailing list -- de...@ovirt.org
>> To unsubscribe send an email to devel-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/de...@ovirt.org/message/A6S264FUJVUNOPGQAA73Y54CWTM6FVJ3/
>>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
>
> Red Hat EMEA <https://www.redhat.com/>
>
> sbona...@redhat.com
> <https://www.redhat.com/>
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.*
>
>
> _______________________________________________
> Devel mailing list -- de...@ovirt.org
> To unsubscribe send an email to devel-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/de...@ovirt.org/message/Y4XAESPURFI2T3NW34QJUHARWWC3UIPQ/
>

-- 


Ce message et toutes les pièces jointes (ci-après le “message”) sont 
établis à l’intention exclusive de ses destinataires et sont confidentiels. 
Si vous recevez ce message par erreur, merci de le détruire et d’en avertir 
immédiatement l’expéditeur. Toute utilisation de ce message non conforme a 
sa destination, toute diffusion ou toute publication, totale ou partielle, 
est interdite, sauf autorisation expresse. L’internet ne permettant pas 
d’assurer l’intégrité de ce message . Interactiv-group (et ses filiales) 
décline(nt) toute responsabilité au titre de ce message, dans l’hypothèse 
ou il aurait été modifié. IT, ES, UK.  
<https://interactiv-group.com/disclaimer.html>
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZN7DJKQ2GAFGYICRSSE5JZFZLAEALY2Q/

Reply via email to