kazu634
/
itamae
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
642 Commits 3 Branches 0 Tags 35 MiB
Commit Graph

37 Commits

Author SHA1 Message Date
Kazuhiro MUSASHI cca3bc93d3 Update Hashicorp apt sources. 2024-04-06 17:31:12 +09:00
Kazuhiro MUSASHI f2d4ec65c4 Modify the variable name. 2024-04-03 14:26:48 +09:00
Kazuhiro MUSASHI 8be3828b0f For `vault agent` to function properly, add `HOME` environment variable. 2024-03-31 20:24:41 +09:00
Kazuhiro MUSASHI 63935ec789 Deploy `/etc/consul.d/server.hcl` only when the consul is server. 2024-03-31 09:45:42 +09:00
Kazuhiro MUSASHI b4189939f8 Update `Consul` certificates. 2024-03-31 09:45:11 +09:00
Kazuhiro MUSASHI cfdec27f89 Consul server setup 2024-02-11 18:55:30 +09:00
Kazuhiro MUSASHI 0af6e65b74 Change `Consul` client ACL token. 2023-12-09 16:56:09 +09:00
Kazuhiro MUSASHI 8074910452 Accumulative changes. 2023-06-24 21:38:14 +09:00
Kazuhiro MUSASHI 6f48a84591 Delete `supervisord` config for `Consul`. 2023-01-28 10:37:37 +09:00
Kazuhiro MUSASHI 1943fb5f09 Change logic to deploy `/etc/systemd/timesyncd.conf`. 2023-01-28 10:37:37 +09:00
Kazuhiro MUSASHI 1875e14f29 Update `/etc/dnsmasq.conf` & `/etc/systemd/resolved.conf` for `Ubuntu 22.04`. 2023-01-28 10:37:37 +09:00
Kazuhiro MUSASHI 6f18eed04e Change the public key of HashiCorp apt key. 2023-01-28 10:34:54 +09:00
Kazuhiro MUSASHI bc2f8128ff `apt update`コマンドの実行回数を減らす 2022-08-11 12:21:39 +09:00
Kazuhiro MUSASHI 956cf439ee Modify indent. 2022-07-10 16:28:49 +09:00
Kazuhiro MUSASHI 73f7ec44b7 Enable `Consul Connect` for client side. 2022-07-10 16:22:28 +09:00
Kazuhiro MUSASHI 48702191fe Allow `Consul` gcp port to communicate. 
```
--- a/cookbooks/consul/setup.rb
+++ b/cookbooks/consul/setup.rb
@@ -44,7 +44,7 @@ service 'consul' do
 end

 # iptables settings here:
-%w( 8300/tcp 8301/tcp 8301/udp 8500/tcp ).each do |port|
+%w( 8300/tcp 8301/tcp 8301/udp 8500/tcp 8502/tcp ).each do |port|
   execute "ufw allow #{port}" do
     user 'root'
```
 2022-07-10 16:22:28 +09:00
Kazuhiro MUSASHI c15c2f3de8 Start `Consul` after `Vault` generates the jwt token. 
```
--- a/cookbooks/consul/files/etc/systemd/system/consul.service
+++ b/cookbooks/consul/files/etc/systemd/system/consul.service
@@ -2,7 +2,7 @@
 Description="HashiCorp Consul - A service mesh solution"
 Documentation=https://www.consul.io/
 Requires=network-online.target
-After=network-online.target
+After=network-online.target vault-agent-consul-jwt.target
 ConditionFileNotEmpty=/etc/consul.d/consul.hcl

 [Service]
```
 2022-07-10 16:22:28 +09:00
Kazuhiro MUSASHI 94489f71d5 Modify `consul.hcl` template to support `Consul Connect`. 2022-07-10 16:22:28 +09:00
Kazuhiro MUSASHI 43fbbe1f18 Support `Ubuntu 22.04`. 2022-07-10 14:32:35 +09:00
Kazuhiro MUSASHI 010a53a58b Deploy `nomad`. 2021-05-02 19:08:17 +09:00
Kazuhiro MUSASHI de2aab1bb8 Change the `consul` server IP addresses. 2020-11-28 16:19:00 +09:00
Kazuhiro MUSASHI 7270023c92 Overwrite the `systemd` config to rotate the log files. 2020-11-28 16:18:46 +09:00
Kazuhiro MUSASHI 0e6c2ad531 Create log directory for `consul`. 2020-11-28 16:18:46 +09:00
Kazuhiro MUSASHI 41f25a9a1c Deploy `/etc/consul.d/config.hcl`. 2020-11-28 16:16:52 +09:00
Kazuhiro MUSASHI 39f8fc5bc1 Install from `deb` package. 2020-11-28 16:07:12 +09:00
Kazuhiro MUSASHI 6315dc759e Healthcheck for `consul`. 2020-10-24 12:30:05 +09:00
Kazuhiro MUSASHI 8b4b0eeb9e Specify `dnsmasq` to check `consul` dns and the upper DNSs. 2020-10-13 21:18:37 +09:00
Kazuhiro MUSASHI 6706b9d4b1 Delete `monit` cookbook. 2020-10-13 21:12:27 +09:00
Kazuhiro MUSASHI 95ac2f5841 Delete `check-reboot-required`. 2020-09-23 23:52:40 +09:00
Kazuhiro MUSASHI 7ba084b71f Use `/usr/local/bin/check_file`. 2020-09-22 23:46:14 +09:00
Kazuhiro MUSASHI 3c634b7dc3 Deploy `check_file_ script. 2020-09-22 23:46:13 +09:00
Kazuhiro MUSASHI d57fbcbc93 Delete the monitoring settings for `consul`. 2019-11-25 00:09:04 +08:00
Kazuhiro MUSASHI a4822fe9ef Do not deploy the monitoring settings for `consul` 2019-11-25 00:08:20 +08:00
Kazuhiro MUSASHI e0820892d4 Install `consul`, when finding a newer version. 2019-11-08 00:28:13 +08:00
Kazuhiro MUSASHI d0dacca340 Exclude "127" and "172" (= Docker) IP addresses. 2019-10-26 23:07:20 +08:00
Kazuhiro MUSASHI 5b8e5b50ab `192.168.10.0/24`セグメントのアドレスを指定する 2019-08-10 18:53:59 +08:00
Kazuhiro MUSASHI 39fbe6669b initial commit 2019-03-03 16:50:49 +08:00