Skip to content

Commit 6868701

Browse files
committed
feat: add step about no_proxy for openbao
1 parent 692399d commit 6868701

File tree

1 file changed

+15
-2
lines changed

1 file changed

+15
-2
lines changed

doc/source/configuration/openbao.rst

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -111,13 +111,26 @@ Setup OpenBao on the seed node
111111
Setup OpenBao HA on the overcloud hosts
112112
---------------------------------------
113113

114-
1. Run secret-store-deploy-overcloud.yml custom playbook
114+
1. Ensure ``no_proxy`` has been configured to include the first controller's internal network IP if using walled garden append if necessary
115+
116+
.. code-block:: yaml
117+
:caption: ``inventory/group_vars/overcloud/proxy.yml``
118+
119+
---
120+
no_proxy:
121+
- "{{ lookup('vars', internal_net_name ~ '_ips')[groups.controllers.0] }}"
122+
123+
.. code-block:: bash
124+
125+
kayobe overcloud host configure -t proxy
126+
127+
2. Run secret-store-deploy-overcloud.yml custom playbook
115128

116129
.. code-block:: bash
117130
118131
kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/secret-store-deploy-overcloud.yml
119132
120-
2. Encrypt overcloud openbao keys (use proper location of vault password file)
133+
3. Encrypt overcloud openbao keys (use proper location of vault password file)
121134

122135
.. code-block:: bash
123136

0 commit comments

Comments
 (0)