Check the RaaS configuration file

As part of the post-installation process, consider reviewing your RaaS configurations. RaaS, which stands for Returner as a Service, is the central component in Tanzu Salt. RaaS provides RPC endpoints to receive management commands from the Tanzu Salt user interface, as well as RPC control endpoints to interface with connected Salt masters. The RaaS configuration settings are in the /etc/raas/raas configuration file on the RaaS node.

Before you start

Configuring the RaaS node is one post-installation step in a series of several steps that should be followed in a specific order. First, complete one of the installation scenarios and then read the following post-installation pages:

• Install the license key
• Install and configure the Master Plugin

Check configuration settings

1. Open the RaaS configuration file on the RaaS node. By default, it is usually stored in /etc/raas/raas.

2. Check the following required settings:

   Setting	Description
   customer_id	Your customer ID, or sample UUID.
   sql	username, password, host, and port can be configured to match your database configuration. For more on storing credentials securely, see the Securing credentials in your Tanzu Salt configuration knowledge base article.

3. Check the following additional settings:

   Setting	Description
   tls_minumum	Sets the minimum TLS version that RaaS accepts. By default, this property is set to 1.2. You can change this setting to a lower version number if needed. However, using a version lower than 1.2 is not recommended because of security issues in earlier versions.
   tls_crt	Path to the crt file for encrypted communication. If this certificate is self-signed and should not be validated using a known CA, be sure to set the sseapi_validate_cert option to False in the Salt master configuration file.
   tls_key	Certificate key file.
   port	Port that is used for connections from the Tanzu Salt user interface and Salt controllers.
   audit	Include the API (RaaS) information in the Debug report for administrator accounts. If valid_logins is set to True, this information is also included in bug reports that are generated by non-admin users.
   raas_presence_expiration	Seconds of inactivity before a minion is considered not present. Default is 3600 seconds (one hour).
   target_groups_from_master_only	Set to true if the tgtmatch engine is enabled on your salt-masters, false otherwise.

Default RaaS configuration file

To generate the default RaaS configuration file, run this command:

raas genconfig /tmp/raas-config

This prompts the RaaS node to generate raas-config. Explanations for each configuration setting are provided by in-line comments in the file.

What to do next

After configuring the RaaS node, you must complete additional post-installation steps. The next step is to log in to the Tanzu Salt user interface for the first time. To continue the post-installation process, see Log in for the first time and change default credentials.