test

Co-authored-by: zramsay <zach@bluecollarcoding.ca>
Co-authored-by: Your Name <you@example.com>
Reviewed-on: #3

.vault/vault-keys

@@ -1,4 +1 @@
-D749E2966193DF63
+3942AFDDEEC4A263
-EE3E0A7A87192BB7
-3C8D0C7EF49AB5A3
-388DD8D74903017E

files/manifests/secret-digitalocean-dns.yaml

@@ -1,19 +1,19 @@
 $ANSIBLE_VAULT;1.1;AES256
-37633666323130636331326338626330663531323239656265636464376534653664393535323234
+63633338396236313234306464383335353566353937633863343265653731336333646465643631
-3231316434616366656265373863663431333466323831350a616337336363346163363962643130
+3236643738343764336239623661643633646634626563640a643734346564343863323133306465
-30663862656334303862643333366237376538633937366332333535303264366562336136336363
+39653535343331353762376533306137323861306631333337363435353161356664306265306566
-6632316663353138620a643230666534653231666534653837333536333930646465623533373639
+3037363762623261630a303665383163323639386463323832343738656138336466356331623031
-65323839643535373666313866373764663832366231333832336135623930306564363930373539
+30373433646538626164646235663336623063346135363634376462663734396366626533663963
-62376134666332323837396634616465323132643933353738376166313236303063663463646561
+61353165363531303932333630373530353366353264373663663339336135353434663736326434
-35653738636264653739326132366530663962306133353061653764353261333737666638343039
+31383766336166353331313139333563316665323831373338666338343835613131643666613766
-34663762636439303530313865366236666131373561323337323539623266666136653232656466
+32376461306338323034633634613236303462373962376430343864626130353837336566616532
-36383833336235623939653765373331313333623031376539613536663134356632313762616364
+31633963373261373530326334373363613166373837353234366430653831633032396132333365
-66363036623538663635306438373962323538323234343234623364633165363865396563366339
+34356237333663356230373136623637346639646436336562393862383561376361326235373937
-37363232313764646237316630643463343561653362373436346663643738356334353431356261
+37333762643530396436636132336435613334386165356162303164646361323662383762633138
-39383131346237636435303338303462636531376639383765343733303133393731326538363862
+37626630393934663134663565316136646431653035663861373561653536626636653333303239
-36643831303030656239613938323862323539356339386435633663306430623838653763373337
+36333438373264653163646235346365363538393732383131353731336330336539393364623038
-38336431303539383831653739313063373539323937353333626235626130613266666230666365
+35333263383464626264393832313135356562656631666362323533366336313334343735376661
-32326238353439393538353939306235643762646339393362633632663638666564363431663366
+63666362343566386139356537303330666634366638376537373763363563313962656666303132
-66366435613262356165373538373138353031356365316262343733663763373031623435323366
+36653361343631633235373833303633623534633563346134613937396266393233623665373535
-63653165386561616562623230376461383936353738313333646335623937353566303462616232
+64313061663363383536613665636332343130663735626238363462353830646437623531323632
-6533356562323134643839313765393933656537633337363932
+6235656635626437316361623438386233303366326662313731

group_vars/all/vault.yml

@@ -1,7 +1,7 @@
 $ANSIBLE_VAULT;1.1;AES256
-35636534633536663965623866666430613934363036343661343362346534353764326662396365
+66346338653832313132613830623362636535646538363836646437613432636464313036353463
-3039363533323464353932373436356362353261343836620a616132336266346238336338653434
+6566333839313861656164363636316564616235313336330a383066396535616138633965313439
-35616334333832356134353466623333363235373066396663363839656663326666323164393265
+62323436333565306239643734343038366431373361303431373462336133313530376537383562
-6338323565323936350a356136353231613765366531366431363864356565653938613963656233
+3566636265616663650a656337656133303764323634326262376565613730313139363262633334
-66613965396531636331353463333436376337363932393033303937383263336637663435373262
+36376361633564386262343030613330366364326334633837323264623864323136336331343838
-3361356561306233303030313438363637343433356463626536
+6234626131323230616135313130343530366365343332396234

group_vars/lcn_cad/k8s-vault.yml

@@ -0,0 +1,8 @@
+$ANSIBLE_VAULT;1.1;AES256
+65333631323235633862386330323936633539353965343065393839346330623066303464356532
+6135333365346533313131653634363636326438303239310a613861356564343431306438646537
+36376165343837636261626436373032616639356666623538356130353936656262636432366262
+3131656631643361620a353832373664303931333534336163373162316566346661633966323931
+63393066323831393637666433323836323331653563353635326439623733356638313762323363
+33656231396535373437653865313837393331353565363933623366326133626664646335343764
+656236313362386235363532313235353334

group_vars/lcn_cad/k8s.yml

@@ -1,9 +1,9 @@
 ---
 # default context is used for stack orchestrator deployments, for testing a custom context name can be usefull
-#k8s_cluster_name: rnt-cad-cluster
+#k8s_cluster_name: lcn-cad-cluster
 k8s_cluster_name: default
-k8s_cluster_url: rnt-cad-cluster-control.realitynetwork.store
+k8s_cluster_url: lcn-control.realitynetwork.store
-k8s_taint_servers: true
+k8s_taint_servers: false
 
 k8s_acme_email: "{{ support_email }}"
 
@@ -52,4 +52,4 @@ k8s_manifests:
   # initiate wildcard cert
   - name: pwa.realitynetwork.store
     type: file
-    source: wildcard-pwa-realitynetwork.yaml
+    source: wildcard-pwa-laconic.yaml

group_vars/rnt_cad/k8s-vault.yml

@@ -1,26 +0,0 @@
-$ANSIBLE_VAULT;1.1;AES256
-61316662343265383362663936373531346563663065646434336239643031356336623230623766
-3135333666356363636536656439363239356232666435370a346232636365616566313331626362
-34303965633863623237333861666564373665623938623164396162323166343337653631333130
-3034333135333535320a646561333736353838356565323737616232373461646531636233363732
-34303463323132313430653733396636313930383364363462636463333139623265636362373438
-65626331386536376666366261633835313334653739643364643639643431353730386662363839
-37636639393530633834623631363765663730383031313138656431633835343263303462313261
-33616366333262643033636563326534653133643232616636353037616261643162386465613134
-39643730666435666165353331653765386539356333623830306239323366363563613639653232
-61373933306531666334306463326161386431326132623238633235623839646236663761386530
-38633963303839343238613164643464356562616334316332366461363963363339343762326535
-66336336393537343762653731306637613030643338616164383435336632313862336464613533
-32653265613262663633623039386337666333336364396435656331376339373938653634336162
-65376433653665373838663261656635623663326433616534653963396163316662613664343561
-39616532386330663337396332316332336537663466636339356463393239356430626266653133
-35623362373030623830303762343830353962353532373638643631636239653338306462343965
-61663031313465343632326664303963623037633639356563646265326233303261663533346632
-65333637613864623237643432613262383632336532316335643938313335306262316561366137
-37303965353065336234303134323631363932613162343337353433373964623565643039636162
-66376236393334613232343434376163613836373565313235323437356463313366646461363537
-32643135636364626533666265393664396538336331663735306433303439356462393532316437
-33613665633538663963633264346461663630623566393233656536323564623361323962303962
-62333736643664343762323433666531333633383563643834346234353736653337326438646530
-66373035336238363635623933663532323362396534653235633535316332393664336164303361
-65643435623334383435666434303465623465653531356465653535633363633036

host_vars/lcn-control/firewalld.yml

@@ -13,5 +13,4 @@ firewalld_add:
     sources:
       - 10.42.0.0/16
       - 10.43.0.0/16
-      - 142.93.110.163/32
+      - 159.203.31.21/32
-      - 147.182.158.116/32

host_vars/rnt-cad-cluster-worker/firewalld.yml

@@ -1,15 +0,0 @@
----
-firewalld_add:
-  - name: public
-    interfaces:
-      - enp9s0
-    services:
-      - http
-      - https
-
-  - name: trusted
-    sources:
-      - 10.42.0.0/16
-      - 10.43.0.0/16
-      - 142.93.110.163/32
-      - 147.182.150.60/32

host_vars/rnt-daemon/firewalld.yml

@@ -1,17 +0,0 @@
----
-firewalld_add:
-  - name: public
-    interfaces:
-      - ens3
-    services:
-      - http
-      - https
-    ports:
-      - 22657/tcp
-      - 22656/tcp
-      - 1317/tcp
-
-  - name: trusted
-    sources:
-      - 147.182.150.60/32
-      - 147.182.158.116/32

host_vars/rnt-daemon/nginx.yml

@@ -1,21 +0,0 @@
----
-nginx_packages_intall: false
-nginx_server_name_hash: 64
-nginx_proxy_read_timeout: 1200
-nginx_proxy_send_timeout: 1200
-nginx_proxy_connection_timeout: 75
-
-nginx_sites:
-  - name: rnt-console
-    url: rnt-console.realitynetwork.store
-    upstream: http://localhost:8080
-    template: basic-proxy
-    ssl: true
-
-  - name: rnt-daemon
-    url: rnt-daemon.realitynetwork.store
-    upstream: http://localhost:9473
-    configs:
-      - rewrite ^/deployer(/.*)? https://webapp-deployer.pwa.realitynetwork.store permanent
-    template: websocket-proxy
-    ssl: true

hosts

@@ -1,14 +1,8 @@
 [all]
-rnt-daemon ansible_host=142.93.110.163
+lcn-control ansible_host=134.122.32.58
-rnt-cad-cluster-control ansible_host=147.182.150.60
-rnt-cad-cluster-worker ansible_host=147.182.158.116
 
-[so]
+[lcn_cad]
-rnt-daemon
+lcn-control k8s_node_type=bootstrap k8s_pod_limit=1024 k8s_external_ip=134.122.32.58
-
-[rnt_cad]
-rnt-cad-cluster-control k8s_node_type=bootstrap
-rnt-cad-cluster-worker k8s_node_type=agent k8s_pod_limit=1024 k8s_external_ip=147.182.158.116
 
 [k8s:children]
-rnt_cad
+lcn_cad

roles/requirements.yml

@@ -1,20 +1,20 @@
 ---
 - name: firewalld
   scm: git
-  src: https://github.com/srwadleigh/ansible-role-firewalld
+  src: https://git.vdb.to/cerc-io/ansible-role-firewalld
   version: main
 
 - name: nginx
   scm: git
-  src: https://github.com/srwadleigh/ansible-role-nginx
+  src: https://git.vdb.to/cerc-io/ansible-role-nginx
   version: main
 
 - name: so
   scm: git
-  src: https://github.com/srwadleigh/ansible-role-so
+  src: https://git.vdb.to/cerc-io/ansible-role-so
   version: main
 
 - name: k8s
   scm: git
-  src: https://github.com/srwadleigh/ansible-role-k8s
+  src: https://git.vdb.to/cerc-io/ansible-role-k8s
   version: main

site.yml

@@ -6,15 +6,6 @@
     - role: firewalld
     - role: nginx
 
-- name: Setup stack orchestrator
-  hosts: so
-  become: true
-  roles:
-    - role: so  
-  tags:
-    - never
-    - so
-
 - name: Setup k8s clusters
   hosts: k8s
   become: true