Goal

• As a system administrator, I want to reuse existing host certificates rather than generate a private shared key for encrypting Pacemaker Remote communication.

Acceptance criteria

A list of verification conditions, successful functional tests, or expected outcomes in order to declare this story/task successfully completed.

• Verify that pcs can add a Pacemaker Remote node using private shared keys (currently the only choice)
• Verify that pcs can add a Pacemaker Remote node using host certificates

Note that a cluster may only use method or the other, they may not be mixed within the same cluster.

The underlying capability was added in Pacemaker 3.0.0. See RHEL-7600 documentation tab for configuration details.