add demo

Signed-off-by: Johan Siebens <[email protected]>

Author: jsiebens

demo/.gitignore

@@ -0,0 +1,4 @@
+.terraform
+terraform.tfvars
+terraform.tfstate
+terraform.tfstate.backup

demo/.terraform.lock.hcl

@@ -0,0 +1,36 @@
+terraform {
+  required_providers {
+    digitalocean = {
+      source  = "digitalocean/digitalocean"
+      version = "2.8.0"
+    }
+  }
+}
+
+locals {
+  name = random_pet.name.id
+}
+
+resource "random_pet" "name" {}
+
+resource "null_resource" "packer_build" {
+  provisioner "local-exec" {
+    command = <<EOF
+cd ${path.module}/packer && \
+  packer build -force \
+    -var 'name=hashi-${local.name}' \
+    -var 'region=${var.region}' \
+    -var 'token=${var.do_token}' \
+    do-packer.pkr.hcl
+EOF
+  }
+}
+
+data "digitalocean_image" "hashi" {
+  depends_on = [null_resource.packer_build]
+  name       = "hashi-${local.name}"
+}
+
+output "snapshot_id" {
+  value = data.digitalocean_image.hashi.id
+}

demo/image/main.tf

@@ -0,0 +1,48 @@
+variable "name" {
+}
+
+variable "source_image" {
+  default = "ubuntu-20-04-x64"
+}
+
+variable "ssh_username" {
+  default = "root"
+}
+
+variable "region" {
+}
+
+variable "token" {
+}
+
+source "digitalocean" "hashistack" {
+  snapshot_name = "${var.name}"
+  image         = "${var.source_image}"
+  ssh_username  = "${var.ssh_username}"
+  region        = "${var.region}"
+  size          = "512mb"
+  api_token     = "${var.token}"
+}
+
+build {
+  sources = [
+    "source.digitalocean.hashistack"
+  ]
+
+  provisioner "shell" {
+    inline = [
+      "sudo mkdir -p /ops",
+      "sudo chmod 777 /ops"
+    ]
+  }
+
+  provisioner "file" {
+    source      = "./scripts"
+    destination = "/ops"
+  }
+
+  provisioner "shell" {
+    script = "./scripts/setup.sh"
+  }
+
+}

demo/image/packer/do-packer.pkr.hcl

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+NODE_CLASS=$1
+TAG_NAME=$2
+API_TOKEN=$3
+REGION=$(curl -s http://169.254.169.254/metadata/v1/region)
+
+tee /etc/nomad.d/config/telemetry.hcl >/dev/null <<EOF
+telemetry {
+  collection_interval = "1s"
+  disable_hostname = true
+  prometheus_metrics = true
+  publish_allocation_metrics = true
+  publish_node_metrics = true
+}
+EOF
+
+hashi-up consul install \
+  --version 1.9.5 \
+  --local \
+  --client-addr 0.0.0.0 \
+  --advertise-addr "{{ GetInterfaceIP \"eth1\" }}" \
+  --connect \
+  --retry-join "provider=digitalocean region=${REGION} tag_name=${TAG_NAME} api_token=${API_TOKEN}"
+
+hashi-up nomad install \
+  --version 1.1.0 \
+  --local \
+  --client \
+  --node-class "${NODE_CLASS}" \
+  --advertise "{{ GetInterfaceIP \"eth1\" }}"
+
+systemctl start consul
+systemctl start nomad

demo/image/packer/scripts/client.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+
+NR_OF_SERVERS=$1
+TAG_NAME=$2
+API_TOKEN=$3
+REGION=$(curl -s http://169.254.169.254/metadata/v1/region)
+
+tee /etc/nomad.d/config/telemetry.hcl >/dev/null <<EOF
+telemetry {
+  collection_interval = "1s"
+  disable_hostname = true
+  prometheus_metrics = true
+  publish_allocation_metrics = true
+  publish_node_metrics = true
+}
+EOF
+
+hashi-up consul install \
+  --version 1.9.5 \
+  --local \
+  --server \
+  --bootstrap-expect ${NR_OF_SERVERS} \
+  --client-addr 0.0.0.0 \
+  --advertise-addr "{{ GetInterfaceIP \"eth1\" }}" \
+  --connect \
+  --retry-join "provider=digitalocean region=${REGION} tag_name=${TAG_NAME} api_token=${API_TOKEN}"
+
+hashi-up nomad install \
+  --version 1.1.0 \
+  --local \
+  --server \
+  --bootstrap-expect ${NR_OF_SERVERS} \
+  --advertise "{{ GetInterfaceIP \"eth1\" }}"
+
+systemctl start consul
+systemctl start nomad

demo/image/packer/scripts/server.sh

@@ -0,0 +1,27 @@
+#! /bin/bash
+set -euo pipefail
+
+apt-get update
+apt-get install -y dnsmasq curl unzip docker.io
+
+mkdir -p /opt/cni/bin
+curl -sSL https://github.com/containernetworking/plugins/releases/download/v0.9.1/cni-plugins-linux-amd64-v0.9.1.tgz | tar -xvz -C /opt/cni/bin
+
+curl -sL get.hashi-up.dev | sh
+
+hashi-up consul install \
+  --version 1.9.5 \
+  --local \
+  --skip-enable
+
+hashi-up nomad install \
+  --version 1.1.0 \
+  --local \
+  --skip-enable
+
+echo "server=/consul/127.0.0.1#8600" > /etc/dnsmasq.d/10-consul
+echo "server=8.8.8.8" > /etc/dnsmasq.d/99-default
+
+systemctl disable systemd-resolved.service
+systemctl stop systemd-resolved
+rm /etc/resolv.conf

demo/image/packer/scripts/setup.sh

@@ -0,0 +1,5 @@
+variable "do_token" {}
+
+variable "region" {
+  type = string
+}

demo/image/variable.tf

@@ -0,0 +1,43 @@
+terraform {
+  required_providers {
+    digitalocean = {
+      source  = "digitalocean/digitalocean"
+      version = "2.8.0"
+    }
+  }
+}
+
+locals {
+  nr_of_servers = 1
+  server_tag    = "hashi-server"
+}
+
+resource "digitalocean_vpc" "hashi" {
+  name     = "hashistack"
+  region   = var.region
+  ip_range = var.ip_range
+}
+
+resource "digitalocean_droplet" "hashi-server" {
+  count     = local.nr_of_servers
+  image     = var.snapshot_id
+  name      = "hashi-server-0${count.index + 1}"
+  region    = var.region
+  size      = "s-1vcpu-1gb"
+  tags      = [local.server_tag]
+  user_data = templatefile("${path.module}/templates/server.sh", { server_tag = local.server_tag, do_token = var.do_token, nr_of_servers = local.nr_of_servers })
+  vpc_uuid  = digitalocean_vpc.hashi.id
+  ssh_keys  = [var.ssh_key]
+}
+
+resource "digitalocean_droplet" "platform" {
+  count     = 1
+  image     = var.snapshot_id
+  name      = "hashi-platform-0${count.index + 1}"
+  region    = var.region
+  size      = "s-1vcpu-1gb"
+  user_data = templatefile("${path.module}/templates/client.sh", { node_class = "platform", server_tag = local.server_tag, do_token = var.do_token })
+  vpc_uuid  = digitalocean_vpc.hashi.id
+  ssh_keys  = [var.ssh_key]
+}
+

demo/infrastructure/main.tf

@@ -0,0 +1,11 @@
+output "vpc_uuid" {
+  value = digitalocean_vpc.hashi.id
+}
+
+output "nomad_addr" {
+  value = "http://${digitalocean_droplet.hashi-server[0].ipv4_address}:4646"
+}
+
+output "consul_addr" {
+  value = "http://${digitalocean_droplet.hashi-server[0].ipv4_address}:8500"
+}