Hashistack on Scaleway

Terraform module to deploy Consul, Nomad, Vault onto Scaleway

This module is currently under construction. I would love assistance. Please reach out.

Features

• [x] deploys a consul, vault, nomad, docker cluster to scaleway
• [x] configures firewalls correctly
• [x] uses local TLS via tls_mode=local
  • [x] uses mutual TLS for consul and vault
  • [ ] uses mutual TLS for nomad
• [ ] uses Cloudflare's Argo Tunnel via tls_mode=cloudflared
• [ ] uses fabio or traefik

Preparation

If you are using MacOS, you will need to do the following:

brew install coreutils
npm i -g json

Servers

Origin Server:

• Creates consul server + vault server
• Initialises consul
• Initialises vault
• Generates nomad vault configuration
• Generates TLS certificates via vault pki
• Restarts consul and vault with TLS

Master Server:

• Creates consul server + nomad server

Slave Server:

• Creates consul agent + docker + nomad agent

Usage

Refer to ./example/main.tf

Debugging

If you need to debug DNS:

sudo yum install -y net-tools # ifconfig
sudo yum install -y bind-utils # dig
netstat -lnp
netstat -rn
route -n
dig consul.service.consul
dig @127.0.0.1 -p 8600 consul.service.consul SRV

License

Unless stated otherwise all works are:

• Copyright © 2018+ Benjamin Lupton

and licensed under:

• MIT License