Comments (6)
We have created an issue in Pivotal Tracker to manage this:
https://www.pivotaltracker.com/story/show/134220245
The labels on this github issue will be updated when the story is started.
from docs-deploying-cf.
Yeah, that's bad-- will clarify-- thanks for pointing it out!
from docs-deploying-cf.
@voelzmo you configure a key and cert for HAproxy in the CF manifest on Openstack -- this is the main key and cert pair used to access CF, right?
For people using the relevant doc linked above, where can we tell them to find these values, or in what previous step did they first generate or choose them? Thanks!
from docs-deploying-cf.
@pspinrad @jadekler The situation is unfortunately a bit complicated:
- You usually setup your CF installation with some kind of domain you own, e.g.
pivotal.io
- You define separate subdomains for your applications and system services, e.g.
apps.pivotal.io
andsys.pivotal.io
- You have a loadbalancer in front (in the OpenStack case this is HAProxy, in the AWS case this is an AWS ELB) which does SSL termination. This loadbalancer gets assigned a floating IP so it can be accessed from the outside
- With means outside of CF and BOSH you need to issue a certificate for a wildcard domain
*.pivotal.io
and have it signed by some Certificate Authority (i.e. a private key) - The certificate and its private key need to be put into those variables mentioned
So TL;DR: The Certificate and private key necessary here are not created during the installation of CF, but are a prerequisite. Probably we should add a section about prerequisites somewhere and reference this section here.
PS: Instructions for vSPhere have essentially the same problem but slightly different wording: https://docs.cloudfoundry.org/deploying/common/vsphere-vcloud-cf-stub.html#editing
from docs-deploying-cf.
@voelzmo - great info, thanks for laying it out!
from docs-deploying-cf.
Thanks @voelzmo
from docs-deploying-cf.
Related Issues (20)
- Explanation of etcd configuration is missing from most IaaS stubs HOT 1
- Explanation of UAA certs is missing from most IaaS stubs HOT 2
- Explanation of `saml` configuration is missing from most IaaS stubs HOT 2
- published version of docs-deploying-cf/common/vsphere-vcloud-cf-stub.html.md.erb not up to date HOT 1
- multiple typos in examples - deploy-aws.html.md.erb HOT 6
- docs-deploying-cf/blob/master/aws/setup_bosh_aws.html.md.erb --where's the manifest? HOT 2
- CF deployment on BOSH lite failing HOT 2
- Why are such large disk sizes required? (instance flavors for CF on OpenStack) HOT 3
- Deployment instructions need updating? HOT 3
- How to deploy to GCP? HOT 2
- generate-bosh-lite-dev-manifest needs to be updated to cli-v2 HOT 2
- IAM user for cloud controller should not have access to "BOSH_BUCKET" HOT 1
- How to get the cert files given in the command HOT 2
- I Keep Exceeding my Quota. How many VMs do I Need to Deploy CF HOT 2
- Copy the following policy text to your clipboard: HOT 2
- Consistent failure starting creating bosh director HOT 2
- Help needed: bbl plan - Failed to parse certificate HOT 2
- Documentation for deploying BOSH on AWS - Step 1 is not longer required HOT 2
- Cloud Foundry deployment on VmWare HOT 2
- Linked windows ops file is outdated HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from docs-deploying-cf.