You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/operate/rs/references/cli-utilities/rladmin/cluster/certificate.md
+26-5Lines changed: 26 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,9 +18,13 @@ Sets a cluster certificate to a specified PEM file.
18
18
19
19
```sh
20
20
rladmin cluster certificate
21
-
set<certificate name>
22
-
certificate_file <certificate filepath>
23
-
[ key_file <key filepath> ]
21
+
set { <certificate_name>| internal }
22
+
[ certificate_file <filepath> ]
23
+
[ key_file <filepath> ]
24
+
[ cpine_certificate_file <filepath> ]
25
+
[ cpine_key_file <filepath> ]
26
+
[ dpine_certificate_file <filepath> ]
27
+
[ dpine_key_file <filepath> ]
24
28
```
25
29
26
30
To set a certificate for a specific service, use the corresponding certificate name. See the [certificates table]({{< relref "/operate/rs/security/certificates">}}) for the list of cluster certificates and their descriptions.
@@ -29,18 +33,35 @@ To set a certificate for a specific service, use the corresponding certificate n
29
33
30
34
| Parameter | Type/Value | Description |
31
35
|-----------|------------|-------------|
32
-
| certificate name | 'cm'<br /> 'api'<br /> 'proxy'<br /> 'syncer'<br /> 'metrics_exporter' | Name of the certificate to update |
36
+
| certificate_name |'cm'<br />'api'<br />'proxy'<br />'syncer'<br />'metrics_exporter'| Name of the certificate to update |
37
+
| internal || Set up internal certificates for data plane internode encryption (DPINE) and control plane internode encryption (CPINE) |
33
38
| certificate_file | filepath | Path to the certificate file |
34
39
| key_file | filepath | Path to the key file (optional) |
40
+
| dpine_certificate_file | filepath | Path to the data plane internode encryption (DPINE) certificate file (internal certificate) |
41
+
| dpine_key_file | filepath | Path to the data plane internode encryption (DPINE) key file (internal certificate) |
42
+
| cpine_certificate_file | filepath | Path to the control plane internode encryption (CPINE) certificate file (internal certificate) |
43
+
| cpine_key_file | filepath | Path to the control plane internode encryption (CPINE) key file (internal certificate) |
35
44
36
45
### Returns
37
46
38
47
Reports that the certificate was set to the specified file. Returns an error message if the certificate fails to update.
39
48
40
-
### Example
49
+
### Examples
50
+
51
+
Update the proxy certificate:
41
52
42
53
```sh
43
54
$ rladmin cluster certificate set proxy \
44
55
certificate_file /tmp/proxy.pem
45
56
Set proxy certificate to contents of file /tmp/proxy.pem
46
57
```
58
+
59
+
Set up [customer-provided internode encryption certificates]({{<relref "/operate/rs/security/encryption/internode-encryption#customer-provided-certificates">}}):
0 commit comments