Commit Graph

54 Commits

Author SHA1 Message Date
45c597b040 Big refactor to split core and services for better ordering 2022-10-27 14:28:34 -07:00
91e64f23eb Improve first run cluster setup 2022-09-27 21:28:02 -07:00
16f7eaa844 Remove some hosts 2022-09-27 21:27:34 -07:00
109113048f Add local loopback as dns in resolv.conf 2022-09-26 16:52:59 -07:00
a80927e5b0 Enable preemption on nomad scheduler 2022-09-16 16:45:26 -07:00
9d739eef7e Make Nomad media-read volume point to rw nfs 2022-09-16 16:44:40 -07:00
12c273f440 Remove bootstrapping values from setup playbook
This will be done in another playbook
2022-09-16 16:43:45 -07:00
5bd4e3716d Bootstrap with 3 servers 2022-09-16 16:42:54 -07:00
a9073aafd4 Wait until Nomad is running before bootstrapping ACLs 2022-09-07 11:11:10 -07:00
912ad58ff0 Clean up comments in setup cluster playbook 2022-09-07 11:09:33 -07:00
d742234a36 Explicitly set envoy version
The default v1.23.0 does not work on arm64
2022-09-07 11:06:26 -07:00
ad22ce6e2a Update vault and nomad versions 2022-09-07 11:05:54 -07:00
478f9c4c8f Update security todos and reference node IP for consul queries 2022-09-06 14:46:49 -07:00
aaae5d087e Update nfs volumes to try and fix permissions 2022-09-04 14:27:27 -07:00
7f4995817b Use default arch maps where possible 2022-08-30 16:15:12 -07:00
9ce1350b5f Use nomad token to look up policies 2022-08-30 15:15:29 -07:00
226eb6cb05 Have nomad talk to vault over loopback 2022-08-30 15:15:10 -07:00
3d3cc25951 Add new nfs volumes 2022-08-30 15:14:55 -07:00
0ea02c2034 Multiarch install tweaks for arm64 2022-08-30 15:14:39 -07:00
0ad777c76f Fix unsealing of single vault instance
Checking status of only one node meant that if that node was sealed
we would not try to unseal other nodes
2022-08-30 15:14:00 -07:00
929501b72c Enable consul autopilot 2022-08-30 15:12:52 -07:00
429854897f Update nomad, consul, vault versions 2022-08-30 15:12:35 -07:00
e96a7501dd Rename nomad anon policy file 2022-08-23 10:31:29 -07:00
eaa81ddc8a Remove set hostname because that's now done in bootstrap 2022-07-27 15:57:12 -07:00
c17a3c950a Add further todos for Nomad Vault 2022-07-27 13:40:21 -07:00
5e1b679cbb Fix consul value bootstrap and hide secrets in log 2022-07-27 11:11:03 -07:00
3a9ae20a6b Update playbook, move acls and comment for fixes
There are some items that I found are broken on first run and made some changes
2022-07-25 11:48:03 -07:00
5b88413604 Add consul bootstrap and move vault to an example 2022-07-21 20:16:10 -07:00
5583b2d38e Deploy Nomad, Consul, and Vault using apt repo 2022-07-21 19:04:44 -07:00
723b5fab78 Improve vault bootstrap and nomad connection 2022-06-28 12:10:18 -07:00
1dad4d22a1 Bootstrap vault secrets 2022-06-28 12:09:57 -07:00
ff4e473a89 Small improvement to consul kv role 2022-06-28 12:08:23 -07:00
609944df8e Install consul dns forwarding 2022-06-23 20:12:09 -07:00
ab58652932 Install consul from repo 2022-06-23 20:11:48 -07:00
67631eb1a0 Update Nomad 2022-06-23 09:51:21 -07:00
d022fe9bc4 Deploy backup jobs to all hosts and dynamically determine jobs per node 2022-06-23 09:49:57 -07:00
b6a9c80748 Add base hostname to consul in Playbook 2022-06-17 15:19:43 -07:00
2f65105592 WIP: Add democratic-csi storage plugin 2022-06-17 15:19:19 -07:00
40e3562195 Use new token variable name after bootstrap 2022-05-24 20:11:41 -07:00
f544a54631 Add autopilot 2022-05-24 20:11:18 -07:00
e57fcfcfdb Add docker install 2022-05-24 20:11:07 -07:00
423c8f23c5 Auto initialize vault 2022-05-24 20:10:47 -07:00
456485aa5e no log for some more sensitive info 2022-04-15 12:12:28 -07:00
a1217250dc Create a lot more host volumes
Some are NFS volumes and present on all devices
2022-04-04 22:20:19 -07:00
f8f7cf2dc2 Add Nomad ACL bootstrap 2022-03-23 16:08:18 -07:00
e3d894a8d5 Update bootstrap for acls 2022-03-21 20:13:13 -07:00
bd5a71c3da Maybe dynamic nomad? 2022-03-15 12:23:47 -07:00
4d4bf36d3c Add vault setup: Not secured 2022-03-15 12:23:47 -07:00
72a9b007e2 Change default bind address to loopback 2022-03-14 15:59:50 -07:00
99889f032d Update hosts improve bootstrap and move a few things around 2022-03-12 10:08:05 -08:00