diff --git a/ovn/controller/ovn-controller.8.xml b/ovn/controller/ovn-controller.8.xml index f9cbbfe8530..d1fcd8a7b3c 100644 --- a/ovn/controller/ovn-controller.8.xml +++ b/ovn/controller/ovn-controller.8.xml @@ -20,6 +20,26 @@ machine-local and do not run over a physical network.
++ PKI configuration is required in order to use SSL for the connections to + the Northbound and Southbound databases. +
+
ovn-controller
retrieves most of its configuration
@@ -28,47 +48,9 @@
vSwitch's "run" directory. It may be overridden by specifying the
ovs-database argument in one of the following forms:
- ssl:ip:port
-
- The specified SSL port on the host at the given
- ip, which must be expressed as an IP address (not a DNS
- name) in IPv4 or IPv6 address format. If ip is an IPv6
- address, then wrap ip with square brackets, e.g.:
- ssl:[::1]:6640
. The --private-key
,
- --certificate
and either of --ca-cert
- or --bootstrap-ca-cert
options are mandatory when this
- form is used.
-
- tcp:ip:port
-
- Connect to the given TCP port on ip, where
- ip can be IPv4 or IPv6 address. If ip is an
- IPv6 address, then wrap ip with square brackets, e.g.:
- tcp:[::1]:6640
.
-
- unix:file
-
- On POSIX, connect to the Unix domain server socket named - file. -
-- On Windows, connect to a localhost TCP port whose value is written - in file. -
-
ovn-controller
assumes it gets configuration
information from the following keys in the Open_vSwitch