Configure iFrame forwarding¶

By default, the Rundeck service configuration does not enable you to get access through an external proxy address and exposed rundeck port, which is 14440 by default. Although, you can easily forward the Runbooks dashboard through a proxy endpoint in case of using Devops Portal through external proxy networks.

To configure iFrame forwarding:

1. Configure iFrame forwarding on the cluster level by specifying the following parameters in the oss/client.yml:

   rundeck_forward_iframe: True
   rundeck_iframe_host: <external-proxy-endpoint>
   rundeck_iframe_port: <external-proxy-port>
   rundeck_iframe_ssl: False
   

2. Apply the updated rundeck.server formula:

   salt -C 'I@rundeck:server' state.sls rundeck.server
   

3. Verify that there are no cached modules, grains, and so on; and minion configuration is updated:

   salt '*' saltutil.clear_cache
   salt -C 'I@docker:swarm:role:master' state.sls salt
   

4. Refresh and update your deployment:

   salt '*' saltutil.refresh_beacons
   salt '*' saltutil.refresh_grains
   salt '*' saltutil.refresh_modules
   salt '*' saltutil.refresh_pillar
   salt '*' saltutil.sync_all
   

5. Recreate the Rundeck stack:

   docker stack rm rundeck
   salt -C 'I@docker:swarm:role:master' state.sls docker.client
   salt -C 'I@rundeck:client' state.sls rundeck.client
   

6. Specify a custom endpoint for the DevOps portal on the cluster level of the Reclass model in the oss/client.yml file:

   devops_portal:
     config:
       service:
         rundeck:
           endpoint:
             address: ${_param:rundeck_iframe_host}
             port: ${_param:rundeck_iframe_port}
             https: ${_param:rundeck_iframe_ssl}
   

7. Recreate the DevOps portal stack:

   docker stack rm devops-portal
   salt -C 'I@devops_portal:config' state.sls devops_portal.config
   salt -C 'I@docker:swarm:role:master' state.sls docker.client
   

Now, you can add an additional configuration for proxying the defined address and apply it on the proxy nodes.