Skip to content

Commit cb145aa

Browse files
committed
DOC-5210 Updated rladmin cluster certificate reference for customer-provided INE certs
1 parent 025ccd6 commit cb145aa

File tree

1 file changed

+26
-5
lines changed
  • content/operate/rs/references/cli-utilities/rladmin/cluster

1 file changed

+26
-5
lines changed

content/operate/rs/references/cli-utilities/rladmin/cluster/certificate.md

Lines changed: 26 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,13 @@ Sets a cluster certificate to a specified PEM file.
1818

1919
```sh
2020
rladmin cluster certificate
21-
set <certificate name>
22-
certificate_file <certificate filepath>
23-
[ key_file <key filepath> ]
21+
set { <certificate_name> | internal }
22+
[ certificate_file <filepath> ]
23+
[ key_file <filepath> ]
24+
[ cpine_certificate_file <filepath> ]
25+
[ cpine_key_file <filepath> ]
26+
[ dpine_certificate_file <filepath> ]
27+
[ dpine_key_file <filepath> ]
2428
```
2529
2630
To set a certificate for a specific service, use the corresponding certificate name. See the [certificates table]({{< relref "/operate/rs/security/certificates" >}}) for the list of cluster certificates and their descriptions.
@@ -29,18 +33,35 @@ To set a certificate for a specific service, use the corresponding certificate n
2933
3034
| Parameter | Type/Value | Description |
3135
|-----------|------------|-------------|
32-
| certificate name | 'cm'<br /> 'api'<br /> 'proxy'<br /> 'syncer'<br /> 'metrics_exporter' | Name of the certificate to update |
36+
| certificate_name | 'cm'<br /> 'api'<br /> 'proxy'<br /> 'syncer'<br /> 'metrics_exporter' | Name of the certificate to update |
37+
| internal | | Set up internal certificates for data plane internode encryption (DPINE) and control plane internode encryption (CPINE) |
3338
| certificate_file | filepath | Path to the certificate file |
3439
| key_file | filepath | Path to the key file (optional) |
40+
| dpine_certificate_file | filepath | Path to the data plane internode encryption (DPINE) certificate file (internal certificate) |
41+
| dpine_key_file | filepath | Path to the data plane internode encryption (DPINE) key file (internal certificate) |
42+
| cpine_certificate_file | filepath | Path to the control plane internode encryption (CPINE) certificate file (internal certificate) |
43+
| cpine_key_file | filepath | Path to the control plane internode encryption (CPINE) key file (internal certificate) |
3544
3645
### Returns
3746
3847
Reports that the certificate was set to the specified file. Returns an error message if the certificate fails to update.
3948
40-
### Example
49+
### Examples
50+
51+
Update the proxy certificate:
4152
4253
```sh
4354
$ rladmin cluster certificate set proxy \
4455
certificate_file /tmp/proxy.pem
4556
Set proxy certificate to contents of file /tmp/proxy.pem
4657
```
58+
59+
Set up [customer-provided internode encryption certificates]({{<relref "/operate/rs/security/encryption/internode-encryption#customer-provided-certificates">}}):
60+
61+
```sh
62+
$ rladmin cluster certificate set internal \
63+
dpine_certificate_file /tmp/dpine_cert.pem \
64+
dpine_key_file /tmp/dpine_key.pem \
65+
cpine_certificate_file /tmp/cpine_cert.pem \
66+
cpine_key_file /tmp/cpine_key.pem
67+
```

0 commit comments

Comments
 (0)