如果您在節點檔案系統中擁有憑證檔案,則可以更新 NCP 網繭規格以在 NCP 網繭中掛接該檔案。

例如,

  spec:
    ...
    containers:
    - name: nsx-ncp
      ...
      volumeMounts:
      ...
      - name: nsx-cert
        # Mount path must match nsx_v3 option "nsx_api_cert_file"
        mountPath: /etc/nsx-ujo/nsx_cert
        - name: nsx-priv-key
        # Mount path must match nsx_v3 option "nsx_api_private_key_file"
        mountPath: /etc/nsx-ujo/nsx_priv_key
    volumes:
    ...
    - name: nsx-cert
      hostPath:
        path: <host-filesystem-cert-path>
    - name: nsx-priv-key
      hostPath:
        path: <host-filesystem-priv-key-path>