diff --git a/doc/source/install/install-devstack.rst b/doc/source/install/install-devstack.rst index de422faf..b6724e02 100644 --- a/doc/source/install/install-devstack.rst +++ b/doc/source/install/install-devstack.rst @@ -8,8 +8,3 @@ In order to install ec2-api with devstack the following should be added to the l .. code-block:: ini enable_plugin ec2-api https://git.openstack.org/openstack/ec2-api - -Configuring OpenStack for EC2 API metadata service ---------------------------------------------------- - -.. include:: metadata-configuration.rst diff --git a/doc/source/install/metadata-configuration.rst b/doc/source/install/metadata-configuration.rst index 2e0d826f..8796d250 100644 --- a/doc/source/install/metadata-configuration.rst +++ b/doc/source/install/metadata-configuration.rst @@ -12,3 +12,17 @@ To configure OpenStack for EC2 API metadata service for Neutron add: to ``/etc/neutron/metadata_agent.ini`` then restart neutron-metadata service. + +If you want to obtain metadata via SSL you need to configure neutron: + +.. code-block:: ini + + [DEFAULT] + nova_metadata_protocol = https + # in case of self-signed certs you may need to specify CA + auth_ca_cert = /path/to/root/cert/if/self/signed + # or skip certs checking + nova_metadata_insecure = True + +And then you'll be able to get EC2-API/Nova metadata from neutron via SSL. +Anyway metadata URL inside the server still be http://169.254.169.254 \ No newline at end of file