Merge "docs: fix order of steps"

This commit is contained in:
Zuul
2025-05-06 10:10:27 +00:00
committed by Gerrit Code Review
2 changed files with 15 additions and 9 deletions

View File

@ -39,7 +39,6 @@ with ID ``40``. In your ``user_variables.yml`` define the following variables:
.. code:: yaml
_systemd_networkd_generic_devices:
- NetDev:
Name: bond0
@ -128,11 +127,12 @@ For that we need to do the following series of changes in the
#. In ``cidr_networks`` add a network which should be used as "public" network
for accessing APIs. For example we will be using `203.0.113.128/28`:
.. code:: yaml
.. code:: yaml
cidr_networks:
...
public_api: 203.0.113.128/28
cidr_networks:
...
public_api: 203.0.113.128/28
#. In ``used_ips`` you need to reserve IP address for your gateway and
``haproxy_keepalived_external_vip_cidr``/``external_lb_vip_address``
@ -166,6 +166,7 @@ For that we need to do the following series of changes in the
- cidr: 0.0.0.0/0
gateway: 203.0.113.129
While these are all changes, that need to be done in
``openstack_user_config.yml``, there is one more override that needs to be
applied.
@ -203,6 +204,7 @@ Example bellow shows a possible content in ``user_variables.yml``:
haproxy_keepalived_external_interface: "{{ haproxy_bind_external_lb_vip_interface }}"
haproxy_keepalived_internal_interface: "{{ haproxy_bind_internal_lb_vip_interface }}"
Alternatively, you can detect IPs used inside your containers to configure
HAProxy binds. This can be done by reffering to ``container_networks`` mapping:

View File

@ -20,21 +20,25 @@ using OpenStack-Ansible:
#. Write the contents of the ``security.txt`` file in accordance with the
standard.
#. Define the contents of ``security.txt`` in the variable
``haproxy_security_txt_content`` in the
``/etc/openstack_deploy/user_variables.yml`` file:
.. code-block:: yaml
.. code-block:: yaml
haproxy_security_txt_content: |
haproxy_security_txt_content: |
# This is my example security.txt file
# Please see https://securitytxt.org/ for details of the specification of this file
#. Update HAProxy
.. code-block:: shell-session
.. code-block:: shell-session
# openstack-ansible haproxy-install.yml
# openstack-ansible haproxy-install.yml
Advanced security.txt ACL
~~~~~~~~~~~~~~~~~~~~~~~~~