Skip to content

Commit 8197472

Browse files
jackhodgkisstomclark0Alex-Welsh
authored
feat: apply suggested changes
Co-authored-by: Tom Clark <[email protected]> Co-authored-by: Alex-Welsh <[email protected]>
1 parent ffaf5d7 commit 8197472

File tree

2 files changed

+10
-5
lines changed

2 files changed

+10
-5
lines changed

doc/source/configuration/ci-cd.rst

+5-5
Original file line numberDiff line numberDiff line change
@@ -213,7 +213,7 @@ Runner Deployment
213213

214214
.. code-block:: ini
215215
216-
[github-runners]
216+
[gitlab-runners]
217217
gitlab-runner-01
218218
219219
4. Provide all the relevant Kayobe :code:`group_vars` for :code:`gitlab-runners` under :code:`${KAYOBE_CONFIG_PATH}/environments/${KAYOBE_ENVIRONMENT}/inventory/group_vars/gitlab-runners`
@@ -292,7 +292,7 @@ Runner Deployment
292292

293293
11. The contents of :code:`/opt/.docker/config.json` on the runner should be added to GitLab CI/CD settings as a sercret variable.
294294
This is required to allow the runners to pull images from the registry.
295-
Visit the GitLab project -> Settings -> CI/CD -> Variables -> Add a new variable with the key :code:`DOCKER_CONFIG_JSON` and the value of the contents of :code:`/opt/.docker/config.json`
295+
Visit the GitLab project -> Settings -> CI/CD -> Variables -> Add a new variable with the key :code:`DOCKER_AUTH_CONFIG` and the value of the contents of :code:`/opt/.docker/config.json`
296296

297297
OpenBao Deployment
298298
------------------
@@ -309,10 +309,10 @@ However, if you have a single host that is shared between environments then Open
309309

310310
If you are sharing OpenBao between environments then you will need to rerun the playbook under each environment to ensure that the correct secrets are available to the runners.
311311
You may use :code:`--tags add_secrets` to skip the deployment within other environments.
312-
For this to work you will need to copy :code:`vault/vault-automation-keys.json` from the first environment to the other environments in addition to copying the host definition of the gitlab runner add network IP.
312+
For this to work you will need to copy :code:`vault/kayobe-automation-keys.json` from the first environment to the other environments in addition to copying the host definition of the gitlab runner add network IP.
313313

314-
Once the above playbook has been applied you need to grab the root token from :code:`vault/vault-automation-keys.json` as you will need this to enable JWT support.
315-
This would also be an opportune time to encrypt the :code:`vault/vault-automation-keys.json` to protect the contents.
314+
Once the above playbook has been applied you need to grab the root token from :code:`vault/kayobe-automation-keys.json` as you will need this to enable JWT support.
315+
This would also be an opportune time to encrypt the :code:`vault/kayobe-automation-keys.json` to protect the contents.
316316

317317
In order to enable JWT support the following steps must be carried out within the openbao container on the runner host.
318318

etc/kayobe/ansible/deploy-openbao-kayobe-automation.yml

+5
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,11 @@
2626
state: directory
2727
become: true
2828

29+
- name: Ensure vault directory exists in environment
30+
ansible.builtin.file:
31+
path: {{ kayobe_env_config_path }}/vault
32+
state: directory
33+
become: true
2934
- name: Import OpenBao role
3035
ansible.builtin.import_role:
3136
name: stackhpc.hashicorp.openbao

0 commit comments

Comments
 (0)