As part of the post-installation process, consider reviewing your RaaS configurations. RaaS, which stands for Returner as a Service, is the central component in Automation Config. RaaS provides RPC endpoints to receive management commands from the Automation Config user interface, as well as RPC control endpoints to interface with connected Salt masters. The RaaS configuration settings are in the /etc/raas/raas
configuration file on the RaaS node.
Before you start
Configuring the RaaS node is one post-installation step in a series of several steps that should be followed in a specific order. First, complete one of the installation scenarios and then read the following post-installation pages:
Check configuration settings
- Open the RaaS configuration file on the RaaS node. By default, it is usually stored in
/etc/raas/raas
. - Check the following required settings:
Setting Description customer_id
Your customer ID, or sample UUID. sql
username
,password
,host
, andport
can be configured to match your database configuration. For more on storing credentials securely, see the Securing credentials in your Automation Config configuration knowledge base article. - Check the following additional settings:
Setting Description tls_minumum
Sets the minimum TLS version that RaaS accepts. By default, this property is set to 1.2
. You can change this setting to a lower version number if needed. However, using a version lower than 1.2 is not recommended because of security issues in earlier versions.tls_crt
Path to the crt
file for encrypted communication. If this certificate is self-signed and should not be validated using a known CA, be sure to set thesseapi_validate_cert
option toFalse
in the Salt master configuration file.tls_key
Certificate key file. port
Port that is used for connections from the Automation Config user interface and Salt controllers. audit
Include the API (RaaS) information in the Debug report for administrator accounts. If valid_logins
is set toTrue
, this information is also included in bug reports that are generated by non-admin users.raas_presence_expiration
Seconds of inactivity before a minion is considered not present. Default is 3600 seconds (one hour). target_grou[s_from_master_pnly
Set to true if the tgtmatch engine is enabled on your salt-masters, false otherwise.
Default RaaS configuration file
raas genconfig /tmp/raas-config
This prompts the RaaS node to generate raas-config
. Explanations for each configuration setting are provided by in-line comments in the file.
What to do next
After configuring the RaaS node, you must complete additional post-installation steps. The next step is to log in to the Automation Config user interface for the first time. To continue the post-installation process, see Log in for the first time and change default credentials.