Skip to content

fix: restore ability to dump all configuration#2273

Open
jackhodgkiss wants to merge 2 commits intostackhpc/2025.1from
fix-configuration-dump
Open

fix: restore ability to dump all configuration#2273
jackhodgkiss wants to merge 2 commits intostackhpc/2025.1from
fix-configuration-dump

Conversation

@jackhodgkiss
Copy link
Copy Markdown
Contributor

When running kayobe configuration dump would fail with

...FAILED! => \n    msg: to_nice_yaml - 'hostvars'. 'hostvars'

This is due to the existence of variables that use net_ip filter. Therefore, this can be avoided by using lookup filter.

Some of these changes are done within config and would be picked automatically. However some changes are done within the documentation and would require a user to update their configuration to benefit from the changes suggested.

Note: This only works with you use --limit as the firewall configuration is within all group and gets evaluated by hosts that do not have network_interfaces such as switches. Due to the command producing a lot of output running the command without a limit it not advisable.

When running `kayobe configuration dump` would fail with

```
...FAILED! => \n    msg: to_nice_yaml - 'hostvars'. 'hostvars'
```

This is due to the existence of variables that use `net_ip` filter.
Therefore, this can be avoided by using `lookup` filter.

Some of these changes are done within config and would be picked
automatically. However some changes are done within the documentation
and would require a user to update their configuration to benefit from
the changes suggested.

Note: This only works with you use `--limit` as the firewall
configuration is within `all` group and gets evaluated by hosts that
do not have network_interfaces such as switches. Due to the command
producing a lot of output running the command without a `limit` it not
advisable.

Signed-off-by: Jack Hodgkiss <jack@stackhpc.com>
@jackhodgkiss jackhodgkiss requested a review from a team as a code owner April 15, 2026 18:06
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request replaces the net_ip filter with a variable lookup for retrieving IP addresses across several configuration files, including OpenBao, Vault, and Wazuh-Agent. A correction is needed in the walled garden documentation where the NTP server configuration incorrectly includes a protocol and port intended for a proxy.

Comment thread doc/source/configuration/walled-garden.rst Outdated
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
@Alex-Welsh
Copy link
Copy Markdown
Member

Reno would be nice, otherwise looks good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants