Merge pull request #188 from CodeNow/consul

Consul

Author: anandkumarpatel

ansible/beta-hosts/hosts

@@ -20,6 +20,14 @@ api
 [api]
 beta-api
 
+[consul]
+beta-services
+beta-api
+beta-web
+
+[vault]
+beta-services
+
 [worker]
 beta-api
 

ansible/consul-values.yml

@@ -0,0 +1,15 @@
+---
+- hosts: "{{ target }}"
+  tasks:
+  - name: make sure `jq` is present
+    apt:
+      name=jq
+      state=present
+
+  - name: get versions in ansible
+    script: getVersions {{ ansible_default_ipv4.address }}
+    register: versions_result
+
+  - name: print versions to stdout
+    debug:
+      msg="Versions in Consul\n{{ versions_result.stdout }}"

ansible/consul.yml

@@ -0,0 +1,9 @@
+---
+- hosts: consul
+  serial: 1
+  vars_files:
+    - group_vars/alpha-consul.yml
+  roles:
+  - { role: notify, tags: notify }
+  - { role: database }
+  - { role: container_kill_start, tags: deploy }

ansible/getVersions.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+consul=localhost:8500/v1
+
+if [[ $1 != "" ]]; then
+  consul=$1:8500/v1
+fi
+
+kv=$consul/kv
+
+echo NODE_ENV: $(curl -s $kv/node/env | jq -r '.[0].Value' | base64 -d)
+
+echo image-builder: $(curl -s $kv/image-builder/version | jq -r '.[0].Value' | base64 -d)
+echo docker-listener: $(curl -s $kv/docker-listener/version | jq -r '.[0].Value' | base64 -d)
+echo filibuster: $(curl -s $kv/filibuster/version | jq -r '.[0].Value' | base64 -d)
+echo krain: $(curl -s $kv/krain/version | jq -r '.[0].Value' | base64 -d)
+echo sauron: $(curl -s $kv/sauron/version | jq -r '.[0].Value' | base64 -d)
+echo charon: $(curl -s $kv/charon/version | jq -r '.[0].Value' | base64 -d)

ansible/group_vars/alpha-consul.yml

@@ -0,0 +1,34 @@
+name: consul
+
+# for database role
+db_path: /etc/consul.d
+
+# for container_kill_start
+pause_length_minutes: 3
+
+container_image: progrium/consul
+container_tag: latest
+
+container_run_opts: >
+  -d
+  -h {{ inventory_hostname }}
+  -v /consul:/data
+  -v /etc/consul.d:/etc/consul.d:ro
+  -p {{ ansible_default_ipv4.address }}:8300:8300
+  -p {{ ansible_default_ipv4.address }}:8301:8301
+  -p {{ ansible_default_ipv4.address }}:8301:8301/udp
+  -p {{ ansible_default_ipv4.address }}:8302:8302
+  -p {{ ansible_default_ipv4.address }}:8302:8302/udp
+  -p {{ ansible_default_ipv4.address }}:8400:8400
+  -p {{ ansible_default_ipv4.address }}:8500:8500
+  --restart=always
+
+container_run_args: >
+  -server
+  -node {{ inventory_hostname }}
+  -advertise {{ ansible_default_ipv4.address }}
+  -config-dir /etc/consul.d
+  {% if hostvars[groups['consul'][0]]['ansible_default_ipv4']['address'] == ansible_default_ipv4.address %}-bootstrap-expect {{ groups['consul'] | length }}{% endif %}
+  -data-dir /data
+  {% if hostvars[groups['consul'][0]]['ansible_default_ipv4']['address'] == ansible_default_ipv4.address %}-ui-dir /ui{% endif %}
+  {% if hostvars[groups['consul'][0]]['ansible_default_ipv4']['address'] != ansible_default_ipv4.address %}-retry-join {{ hostvars[groups['consul'][0]]['ansible_default_ipv4']['address'] }}{% endif %}

ansible/group_vars/alpha-vault.yml

@@ -0,0 +1,20 @@
+name: vault
+
+# for database role
+db_path: /opt/runnable/vault
+
+container_image: runnable/vault
+container_tag: v0.3.1
+
+container_run_opts: >
+  -d
+  -h {{ inventory_hostname }}
+  -v /opt/runnable/vault/vault.hcl:/vault.hcl:ro
+  -p {{ ansible_default_ipv4.address }}:8200:8200
+  --cap-add IPC_LOCK
+  --restart=always
+
+container_run_args: >
+  server
+  -log-level=warn
+  -config=/vault.hcl

ansible/prod-hosts/hosts

@@ -26,6 +26,14 @@ api
 [api]
 alpha-api
 
+[consul]
+alpha-api-old
+alpha-api
+alpha-web
+
+[vault]
+alpha-api-old
+
 [worker]
 alpha-api
 

ansible/roles/container_kill_start/tasks/main.yml

@@ -46,6 +46,10 @@
   command: sudo docker rm {{ item }}
   with_items: old_containers_id.stdout_lines
 
+- name: pause to allow for any odd conditions in system caching tables
+  when: pause_length_minutes is defined and old_containers_id.changed
+  pause: minutes={{pause_length_minutes}}
+
 # start our new container with options and args
 - name: start container
   command: >

ansible/roles/vault/tasks/main.yml

@@ -0,0 +1,5 @@
+- name: copy vault config
+  sudo: yes
+  template:
+    src=vault.hcl
+    dest=/opt/runnable/vault/vault.hcl

ansible/roles/vault/templates/vault.hcl

@@ -0,0 +1,10 @@
+backend "consul" {
+  address = "{{ ansible_default_ipv4.address }}:8500"
+  path = "vault"
+  advertise_addr = "http://{{ ansible_default_ipv4.address }}:8200"
+}
+
+listener "tcp" {
+ address = "0.0.0.0:8200"
+ tls_disable = 1
+}