@@ -143,37 +143,39 @@ RGW admin command
143143Upgrading root ca certificates
144144------------------------------
145145
146+ #. Make sure that the RGW service is running.
147+ #. Make sure that the RGW service is up.
148+ #. Make sure that the RGW service has been upgraded to the latest release.
149+ #. From the Primary cluster on the Manager node, run the following command:
146150
147- To upgrade root ca certificate, make sure rgw serives is upgraded. Make sure the rgw service is up and running.
148- On Primary cluster on manger node run command:
151+ .. prompt :: bash #
149152
150- ::
153+ ceph orch cert-store get cert cephadm_root_ca_cert
151154
152- ceph orch cert-store get cert cephadm_root_ca_cert
155+ #. On the node where the RGW service is running, store the certificate on the
156+ following path::
153157
154- Store the certificate on node where rgw service is running on path
155- ::
158+ /etc/pki/ca-trust/source/anchors/<cert_name>.crt
156159
157- /etc/pki/ca-trust/source/anchors/<cert_name>.crt
160+ #. Verify the certificate by running the following command:
158161
159- Verify certificate using command:
162+ .. prompt :: bash #
160163
161- ::
164+ openssl x509 -in <cert_name>.crt -noout -text
162165
163- openssl x509 -in <cert_name>.crt -noout -text
166+ #. Perform the above steps on the MGR node and on the RGW node of all secondary
167+ clusters.
164168
165- Perform above steps on mgr node and rgw node of secondary clusters.
169+ #. After the certificates have been validated on all clusters, run the
170+ following command on all clusters that generate certificates:
166171
167- Once certificates are validated on all the sites. Run:
172+ .. prompt :: bash #
168173
169- ::
174+ update-ca-trust
170175
171- update-ca-trust
176+ #. From the primary node, ensure that the ``curl `` command can be run by the
177+ user:
172178
173- on all the nodes where certificates are generated.
174-
175- Check from primary node if the curl command works for the user:
176-
177- ::
179+ .. prompt :: bash [root@primary-node]#
178180
179- [root@ceph-pri-node-0 anchors]# curl https://<host_ip>:443
181+ curl https://<host_ip>:443
0 commit comments