-
Notifications
You must be signed in to change notification settings - Fork 120
[VAULT] Add run Vault on zCX page #1479
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Vercel Previews Deployed
|
Broken Link CheckerNo broken links found! 🎉 |
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
| -v haproxy-config:/usr/local/etc/haproxy \ | ||
| ibmz-hc-registry.ngrok.dev/haproxy:3.2 | ||
| ``` | ||
|
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we also set the VAULT_PROXY_ADDR to the load balancer URL and port for easier API calls later?
For example;
| 1. Set and export the `VAULT_PROXY_ADDR` environment variable in your local | |
| terminal to the load balancer URL and port: | |
| ```shell-session | |
| $ export VAULT_PROXY_ADDR="https://<load_balancer_id>:<port>" | |
| ``` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
☝️ @Shobhit-IBM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes
| ```shell-session | ||
| $ curl \ | ||
| --cacert <CA_CERT_FILE> \ | ||
| --header "X-Vault-Token: <VAULT_TOKEN>" \ | ||
| https://<LOAD_BALANCER_IP>:<PORT>/v1/sys/storage/raft/configuration \ | ||
| | jq . | ||
| ``` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| ```shell-session | |
| $ curl \ | |
| --cacert <CA_CERT_FILE> \ | |
| --header "X-Vault-Token: <VAULT_TOKEN>" \ | |
| https://<LOAD_BALANCER_IP>:<PORT>/v1/sys/storage/raft/configuration \ | |
| | jq . | |
| ``` | |
| <Tabs> | |
| <Tab heading="CLI" group="cli"> | |
| ```shell-session | |
| $ vault read \ | |
| -ca-cert "/path/to/vault.pem" \ | |
| -format json \ | |
| /sys/storage/raft/configuration \ | |
| | jq | |
| ``` | |
| </Tab> | |
| <Tab heading="API" group="api"> | |
| ```shell-session | |
| $ curl \ | |
| --request POST \ | |
| --header "X-Vault-Token: ${VAULT_TOKEN}" \ | |
| --namespace "X-Vault-Namespace: ${VAULT_NAMESPACE}" \ | |
| --cacert <CA_CERT_FILE> \ | |
| ${VAULT_PROXY_ADDR}/v1/sys/storage/raft/configuration \ | |
| | jq . | |
| ``` | |
| </Tab> | |
| </Tabs> | |
We generally want new content to provide examples using both the CLI and the API so folks have example code regardless of which method they prefer
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
content/vault/v1.21.x/content/docs/deploy/run-as-zcx-cluster.mdx
Outdated
Show resolved
Hide resolved
schavis
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let me know if you have any questions
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
Co-authored-by: Sarah Chavis <[email protected]>
| 1. Add the leader configuration files to the volume: | ||
|
|
||
| ```shell-session | ||
| $ TBD |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We need to replace the TBDs with actual commands
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
☝️ @Shobhit-IBM What command should go here?
| 1. Add the follower configuration files to the volume: | ||
|
|
||
| ```shell-session | ||
| $ TBD |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing actual command
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
☝️ @Shobhit-IBM What command should go here?
|
|
||
| 1. 2. Add the certificate files to the volume: | ||
| ```shell-session | ||
| $ TBD |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing actual command
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
☝️ @Shobhit-IBM What command should go here?
🔍 Deploy preview
This PR adds "Deploy Vault on zCX" page based on #1464.
Make the editorial updates to the original.