962af038cf
fix: update preflight checks
2024-07-14 16:18:06 +02:00
a8faaeb21f
fix: do not try to install docker during bootstrap, as it will depend on which hosts are docker-enabled
2024-07-14 16:17:39 +02:00
7f8d8654a4
feat(deployment): Implement new structure for deploying components
...
development / Check commit compliance (push) Successful in 6s
This allows operators to target specific groups when deploying using the --tags flag of ansible. You can, for now, target consul, consul_servers, consul_agents, nomad, nomad_servers, nomad_clients, vault and haproxy
2024-07-14 16:15:21 +02:00
1448d10c93
fix: consul_primary_datacenter defaults to consul_datacenter for ease of configuration in single cluster mode, remove some useless comments
development / Check commit compliance (push) Successful in 6s
2024-07-11 23:31:03 +02:00
594188b28f
fix: generate proper 32 bytes base 64 random strings for gossip encryption for both nomad and consul
development / Check commit compliance (push) Successful in 6s
2024-07-11 23:30:05 +02:00
8bf82336f8
fix: more deployment host exclusion
development / Check commit compliance (push) Successful in 6s
2024-07-11 23:29:17 +02:00
01d91eae57
fix: exclude deployment host from all playbooks where it does not need to be included (and can cause issues)
2024-07-11 23:28:44 +02:00
b7bd59d5fa
fix: do not use run_once instructions as it is wildly unreliable
development / Check commit compliance (push) Successful in 31s
2024-07-11 23:27:44 +02:00
c9241b9e92
fix: typo in credentials template preventing from generating the initial credential file
development / Check commit compliance (push) Successful in 6s
2024-07-10 22:01:44 +02:00
ed27759dcd
feat: add barebone driver options for nomad (not fully working)
development / Check commit compliance (push) Successful in 26s
pull-requests-open / Check commit compliance (pull_request) Successful in 26s
2024-07-10 19:32:59 +02:00
9417437715
feat: add docs on generating credentials
development / Check commit compliance (push) Successful in 6s
2024-07-03 22:17:57 +02:00
fd9a0e3c55
fix: implement longer wait to stabilize consul cluster before bootstrapping to avoid timeout errors
development / Check commit compliance (push) Successful in 30s
2024-07-03 21:43:14 +02:00
074da0289a
feat(nomad): move variables to globals.yml, adjust bootstrap module for nomad ACLs
development / Check commit compliance (push) Successful in 6s
2024-07-02 23:06:16 +02:00
95a1d80f76
feat: add nomad deployment options, variables, and playbooks
development / Check commit compliance (push) Successful in 26s
2024-06-25 15:16:42 +02:00
b32815066f
feat: use new vault and consul roles, and only allow for host deployment after docker support drop
development / Check commit compliance (push) Successful in 1m33s
2024-06-20 00:32:33 +02:00
08909ceed0
feat: add global variables for nomad deployment
development / Check commit compliance (push) Successful in 28s
2024-05-16 17:29:41 +02:00
340f2137d4
feat(generate_credentials): generate new accesor ids and vault token credentials
development / Check commit compliance (push) Successful in 6s
pull-requests-open / Check commit compliance (pull_request) Successful in 7s
2024-05-08 02:25:13 +02:00
83f9c9748e
feat(vault): enable consul service registration automatically if consul is also enabled
development / Check commit compliance (push) Successful in 11s
pull-requests-open / Check commit compliance (pull_request) Successful in 8s
2024-05-07 19:23:48 +02:00
2480a387c3
fix(globals): restore default globals.yml file, move changes to test directory
pull-requests-open / Check commit compliance (pull_request) Successful in 7s
development / Check commit compliance (push) Successful in 27s
2024-05-05 19:41:29 +02:00
c53e6905df
fix(vault/consul): ensure idempotence of extra_volumes list to avoid restarting on each run due to slightly different service files
development / Check commit compliance (push) Successful in 6s
pull-requests-open / Check commit compliance (pull_request) Successful in 29s
2024-05-05 02:47:49 +02:00
bd2028c3af
feat(consul): allow enabling consul internal TLS
development / Check commit compliance (push) Successful in 6s
2024-05-05 02:37:29 +02:00
a989d14fb2
chore: remove some unused code, ignore more testing files
2024-05-04 00:31:30 +02:00
1c1730e5c9
fix: vault extra files list not being idempotent between runs
2024-05-03 23:53:57 +02:00
b5614dfee0
fix: various fixes to accomodate the new pre-generated credentials
2024-05-03 22:31:38 +02:00
01392e4db0
feat: add new way of loading vars following move to misc task group
2024-05-03 22:30:40 +02:00
b66113b84c
fix: various small issues on generate playbooks
2024-05-03 22:27:42 +02:00
0a1ddc63bf
feat(consul): utilize the new pre-generated credentials on consul deployment
2024-05-03 22:26:30 +02:00
4e0c90f110
fix: various inconsistencies and idempotence issues related to variable computing
2024-05-03 22:25:03 +02:00
7ffa720824
feat: update vault deployment to utilize the new variable loading solution
2024-05-03 22:23:47 +02:00
fa742277b2
feat: split load_vars play into multiple specific plays
2024-05-03 22:22:59 +02:00
370fc65b23
feat: generate credentials.yml from template
2024-05-03 00:34:11 +02:00
489f9aa101
feat: add playbook to generate credentials before deploying
2024-05-03 00:30:54 +02:00
1a83036506
feat(TLS): add tls features to vault and trust hosts store on containers
2024-04-06 23:47:35 +02:00
812a2bb04a
feat(certs): generate_certs playbook now generate internal CA for vault
2024-04-03 23:55:01 +02:00
8016d19efe
feat(haproxy): add a lot to haproxy, and generate_certs playbook + docs
2024-04-01 23:59:48 +02:00
5204358a20
feat(proxy): add consul agents to proxies and register haproxy service to consul is consul is enabled
2024-03-22 01:00:04 +01:00
267a23317f
feat(consul): start configuring and deploying agents
2024-03-17 19:05:02 +01:00
c4768c7f6b
feat(deploy): add haproxy deployment, integrate with consul
2024-03-17 10:57:02 +01:00
29f26051d3
feat(consul): polish initial deployment of consul, and agent token generation
2024-03-13 23:27:12 +01:00
d9ff21db6f
feat(consul): start creation of agents token, merge it with primary config if already present
2024-03-13 00:02:14 +01:00
ef24cee9df
feat(inventory): add haproxy nodes to test and inventory
2024-03-11 23:23:25 +01:00
bbf03e18fc
feat(core): change namespace of collection
2024-02-07 21:49:00 +01:00
d270161c28
feat(docs): start writing the architecture guide
2024-01-28 22:34:27 +01:00
ec231bf184
feat(vault): wrote some more documentation on using the tool
2024-01-28 16:21:38 +01:00
4edd097ee5
feat(consul): first working version of acl_bootstrap module
2024-01-28 01:07:55 +01:00
c21ce03ede
feat(consul): make ACL default to enabled with default policy to deny
2024-01-27 00:54:13 +01:00
10fc308ff0
feat(vault): added version variables for vault
2024-01-26 21:51:42 +01:00
00883b2dec
feat(consul): add initial simple consul cluster
2024-01-25 22:40:44 +01:00
8ce66d42a7
feat(vault): break things trying to fix vault unseal not returning anything on mulitple retries
2024-01-24 23:54:58 +01:00
6e4b4f38b7
feat(vars): add logging configuration for vault
2024-01-07 00:57:29 +01:00
