Self-Hosted Custom CA Update #3061

karl-cardenas-coding · 2024-06-11T22:41:14Z

Describe the Change

This PR updates the instructions for installing a custom CA when deploying Palette or VerteX in an airgap environment.

Changed Pages

💻 Preview URL for Page

Jira Tickets

🎫 DOC-1224

Backports

Can this PR be backported?

Yes. Remember to add the relevant backport labels to your PR.
No. Please leave a short comment below about why this PR cannot be backported.

netlify · 2024-06-11T22:41:31Z

✅ Deploy Preview for docs-spectrocloud ready!

Name	Link
🔨 Latest commit	`fc9c8bf`
🔍 Latest deploy log	https://app.netlify.com/sites/docs-spectrocloud/deploys/66749dcc73fd3c00087a14f4
😎 Deploy Preview	https://deploy-preview-3061--docs-spectrocloud.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

github-actions · 2024-06-11T23:09:30Z

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

+    - The custom certificate's Fully Qualified Domain Name (FQDN) must match the hostname or IP address you provide for
+      the airgap support VM. Otherwise, the airgap setup process will fail due to a certificate mismatch.
+
+    - The custom SSL certificates must have the following permissions bits set:


🚫 [vale] _{reported by reviewdog 🐶}
[spectrocloud.colon] Use colons only to introduce lists, unless in code blocks or inline code.

github-actions · 2024-06-11T23:09:31Z

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

+      - **server.crt**: 644
+      - **server.key**: 600
+
+    :::


🚫 [vale] _{reported by reviewdog 🐶}
[spectrocloud.colon] Use colons only to introduce lists, unless in code blocks or inline code.

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

caroldelwing

Approved with a tiny question :)
I could not leave a comment there, but there is a box in step 17 of the VerteX page that is not aligned.

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

caroldelwing · 2024-06-20T20:58:45Z

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

-
-    - **server.crt**
-    - **server.key**
+    Repository, copy the custom SSL certificates, in base64 PEM format, to the airgap support VM.


Suggested change

Repository, copy the custom SSL certificates, in base64 PEM format, to the airgap support VM.

Repository, copy the custom SSL certificates in base64 PEM format to the airgap support VM.

maybe? :)

caroldelwing · 2024-06-20T21:03:35Z

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

-
-    - **server.crt**
-    - **server.key**
+    Repository, copy the custom SSL certificates, in base64 PEM format, to the airgap support VM.


Suggested change

Repository, copy the custom SSL certificates, in base64 PEM format, to the airgap support VM.

Repository, copy the custom SSL certificates in base64 PEM format to the airgap support VM.

maybe? :)

caroldelwing · 2024-06-20T21:04:30Z

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

+
+    - The custom SSL certificates must be in base64 PEM format. If you have custom SSL certificates in a different
+      format, convert them to base64 PEM format before copying them to the support VM. The airgap setup process also
+      expects the files to be named **server.crt** and **server.key**.


Same question hehe Which files?

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review (cherry picked from commit f775c3c)

vault-token-factory-spectrocloud · 2024-06-20T21:35:59Z

💔 Some backports could not be created

Status	Branch	Result
❌	version-4-0	Backport failed because of merge conflicts
❌	version-4-1	Backport failed because of merge conflicts
❌	version-4-2	Backport failed because of merge conflicts
✅	version-4-3
✅	version-4-4

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

backport --pr 3061

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review (cherry picked from commit f775c3c) Co-authored-by: Karl Cardenas <29551334+karl-cardenas-coding@users.noreply.github.com>

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

) * docs: DOC-1224 Self-Hosted Custom CA Update (#3061) * docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review * chore: fix indent

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

JPedro2 · 2024-06-21T17:31:20Z

@karl-cardenas-coding the below is actually not needed anymore. It was needed in 4.2.13 but in 4.3.6 the airgap.sh script does it already by default as it copies the certs from /opt/spectro/ssl

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

This reverts commit e7ca4bd.

docs: DOC-1224

1644d91

docs: vertex steps

a6a2b4e

karl-cardenas-coding marked this pull request as ready for review June 11, 2024 23:08

karl-cardenas-coding requested a review from a team as a code owner June 11, 2024 23:08

karl-cardenas-coding requested review from yuliiiah, addetz and lennessyy June 11, 2024 23:08

github-actions bot reviewed Jun 11, 2024

View reviewed changes

karl-cardenas-coding added 2 commits June 13, 2024 11:12

Merge branch 'master' into airgap-scar-steps

378e3f9

docs: updated instructions

435f819

github-actions bot reviewed Jun 13, 2024

View reviewed changes

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md Show resolved Hide resolved

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md Show resolved Hide resolved

karl-cardenas-coding and others added 2 commits June 13, 2024 12:55

Merge branch 'master' into airgap-scar-steps

1f59818

Merge branch 'master' into airgap-scar-steps

879676d

caroldelwing approved these changes Jun 20, 2024

View reviewed changes

karl-cardenas-coding commented Jun 20, 2024

View reviewed changes

...rsion/install-palette/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md Outdated Show resolved Hide resolved

karl-cardenas-coding commented Jun 20, 2024

View reviewed changes

...nstall-palette-vertex/install-on-vmware/airgap-install/vmware-vsphere-airgap-instructions.md Outdated Show resolved Hide resolved

Apply suggestions from code review

fc9c8bf

karl-cardenas-coding enabled auto-merge (squash) June 20, 2024 21:25

karl-cardenas-coding merged commit f775c3c into master Jun 20, 2024
26 checks passed

karl-cardenas-coding deleted the airgap-scar-steps branch June 20, 2024 21:34

vault-token-factory-spectrocloud bot mentioned this pull request Jun 20, 2024

[version-4-3] docs: DOC-1224 Self-Hosted Custom CA Update (#3061) #3133

Merged

vault-token-factory-spectrocloud bot mentioned this pull request Jun 20, 2024

[version-4-4] docs: DOC-1224 Self-Hosted Custom CA Update (#3061) #3134

Merged

karl-cardenas-coding added a commit that referenced this pull request Jun 20, 2024

docs: DOC-1224 Self-Hosted Custom CA Update (#3061)

f499ba7

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

karl-cardenas-coding added a commit that referenced this pull request Jun 20, 2024

docs: DOC-1224 Self-Hosted Custom CA Update (#3061)

cc418f1

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

karl-cardenas-coding mentioned this pull request Jun 20, 2024

[version-4-1] docs: DOC-1224 Self-Hosted Custom CA Update (#3061) #3136

Merged

karl-cardenas-coding added a commit that referenced this pull request Jun 20, 2024

docs: DOC-1224 Self-Hosted Custom CA Update (#3061)

716878f

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

karl-cardenas-coding mentioned this pull request Jun 20, 2024

[version-4-0] docs: DOC-1224 Self-Hosted Custom CA Update (#3061) #3137

Merged

karl-cardenas-coding added a commit that referenced this pull request Jun 20, 2024

docs: DOC-1224 Self-Hosted Custom CA Update (#3061) (#3136)

dca3036

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

karl-cardenas-coding added a commit that referenced this pull request Jun 20, 2024

docs: DOC-1224 Self-Hosted Custom CA Update (#3061) (#3137)

e0d9401

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

karl-cardenas-coding mentioned this pull request Jun 21, 2024

docs: feedback from Pedro #3156

Merged

2 tasks

nage1234 pushed a commit that referenced this pull request Jun 28, 2024

docs: DOC-1224 Self-Hosted Custom CA Update (#3061)

e7ca4bd

* docs: DOC-1224 * docs: vertex steps * docs: updated instructions * Apply suggestions from code review

nage1234 added a commit that referenced this pull request Jun 28, 2024

Revert "docs: DOC-1224 Self-Hosted Custom CA Update (#3061)"

6cc826a

This reverts commit e7ca4bd.

vault-token-factory-spectrocloud bot mentioned this pull request Jul 17, 2024

Update ghsa-m425-mq94-257g.md #3399

Merged

2 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Self-Hosted Custom CA Update #3061

Self-Hosted Custom CA Update #3061

karl-cardenas-coding commented Jun 11, 2024 •

edited

Loading

netlify bot commented Jun 11, 2024 •

edited

Loading

github-actions bot Jun 11, 2024

github-actions bot Jun 11, 2024

caroldelwing left a comment

caroldelwing Jun 20, 2024

caroldelwing Jun 20, 2024

caroldelwing Jun 20, 2024

vault-token-factory-spectrocloud bot commented Jun 20, 2024

JPedro2 commented Jun 21, 2024

	Repository, copy the custom SSL certificates, in base64 PEM format, to the airgap support VM.
	Repository, copy the custom SSL certificates in base64 PEM format to the airgap support VM.

Self-Hosted Custom CA Update #3061

Self-Hosted Custom CA Update #3061

Conversation

karl-cardenas-coding commented Jun 11, 2024 • edited Loading

Describe the Change

Changed Pages

Jira Tickets

Backports

netlify bot commented Jun 11, 2024 • edited Loading

✅ Deploy Preview for docs-spectrocloud ready!

github-actions bot Jun 11, 2024

Choose a reason for hiding this comment

github-actions bot Jun 11, 2024

Choose a reason for hiding this comment

caroldelwing left a comment

Choose a reason for hiding this comment

caroldelwing Jun 20, 2024

Choose a reason for hiding this comment

caroldelwing Jun 20, 2024

Choose a reason for hiding this comment

caroldelwing Jun 20, 2024

Choose a reason for hiding this comment

vault-token-factory-spectrocloud bot commented Jun 20, 2024

💔 Some backports could not be created

Manual backport

Questions ?

JPedro2 commented Jun 21, 2024

karl-cardenas-coding commented Jun 11, 2024 •

edited

Loading

netlify bot commented Jun 11, 2024 •

edited

Loading