terraform: create hosts

ansible/group_vars/all.yml

@@ -2,8 +2,11 @@
 # Root password
 bootstrap__root_pass: '{{lookup("bitwarden", "root-pass")}}'
 # Consul
-bootstrap__consul_encryption_key: '{{lookup("bitwarden", "consul/cluster", field="encryption-key")}}'
-bootstarp__consul_agent_acl_token: '{{lookup("bitwarden", "consul/acl-tokens", field="agent-default")}}'
+bootstrap__consul_encryption_key:   '{{lookup("bitwarden", "consul/cluster",    field="encryption-key")}}'
+bootstarp__consul_agent_acl_token:  '{{lookup("bitwarden", "consul/acl-tokens", field="agent-default")}}'
+bootstrap__consul_certs_ca_crt:     '{{lookup("bitwarden", "consul/certs",      file="ca.pem")}}'
+bootstrap__consul_certs_client_crt: '{{lookup("bitwarden", "consul/certs",      file="client.pem")}}'
+bootstrap__consul_certs_client_key: '{{lookup("bitwarden", "consul/certs",      file="client-key.pem")}}'
 # SSHGuard
 bootstrap__sshguard_whitelist_extra: ['{{lookup("bitwarden", "sshguard/whitelist", field="jakubgs-home")}}']
 # Wireguard

ansible/inventory/test

@@ -0,0 +1,26 @@
+# NOTE: This file is generated by terraform.py
+# For emergency use when Consul fails
+[all]
+node-01.ac-cn-hongkong-c.waku.test hostname=node-01.ac-cn-hongkong-c.waku.test ansible_host=8.218.219.107 env=waku stage=test data_center=ac-cn-hongkong-c region=cn-hongkong-c dns_entry=node-01.ac-cn-hongkong-c.waku.test.statusim.net
+node-01.do-ams3.waku.test hostname=node-01.do-ams3.waku.test ansible_host=178.128.141.171 env=waku stage=test data_center=do-ams3 region=ams3 dns_entry=node-01.do-ams3.waku.test.statusim.net
+node-01.gc-us-central1-a.waku.test hostname=node-01.gc-us-central1-a.waku.test ansible_host=34.16.1.67 env=waku stage=test data_center=gc-us-central1-a region=us-central1-a dns_entry=node-01.gc-us-central1-a.waku.test.statusim.net
+
+[ac-cn-hongkong-c]
+node-01.ac-cn-hongkong-c.waku.test
+
+[do-ams3]
+node-01.do-ams3.waku.test
+
+[gc-us-central1-a]
+node-01.gc-us-central1-a.waku.test
+
+[waku]
+node-01.ac-cn-hongkong-c.waku.test
+node-01.do-ams3.waku.test
+node-01.gc-us-central1-a.waku.test
+
+[waku.test]
+node-01.ac-cn-hongkong-c.waku.test
+node-01.do-ams3.waku.test
+node-01.gc-us-central1-a.waku.test
+

ansible/requirements.yml

@@ -1,30 +1,24 @@
 ---
 - name: infra-role-bootstrap-linux
   src: git@github.com:status-im/infra-role-bootstrap-linux.git
-  version: 50eda0808cceaaad2a5c5cdb4493935f2e3a637d
   scm: git
 
 - name: infra-role-wireguard
   src: git@github.com:status-im/infra-role-wireguard.git
-  version: b711bbabd2dc3d9ce8b1c3a6e5bc785901db9d09
   scm: git
 
 - name: open-ports
   src: git@github.com:status-im/infra-role-open-ports.git
-  version: 24dc30dbdf85e6758cb6924074b2f7a0f4541524
   scm: git
 
 - name: swap-file
   src: git@github.com:status-im/infra-role-swap-file.git
-  version: 3fb0fb8d313ab388df1b38d516e2ff88b72a2cf7
   scm: git
 
 - name: consul-service
   src: git@github.com:status-im/infra-role-consul-service.git
-  version: 2b3d4e53856d6cc91ae5c5a342fd12f2bb96aa88
   scm: git
 
 - name: systemd-timer
   src: git@github.com:status-im/infra-role-systemd-timer.git
-  version: c6bbc3d1b4b0ba603d82fa06cd17297d12523182
   scm: git

hosts.tf

@@ -0,0 +1,35 @@
+module "hosts" {
+  source = "github.com/status-im/infra-tf-multi-provider"
+
+  /* node type */
+  group  = "waku"
+  env    = "waku"
+  stage  = terraform.workspace
+  domain = var.domain
+
+  /* scaling */
+  host_count = local.ws["hosts_count"]
+
+  /* instance sizes */
+  do_type = local.ws["do_type"] /* DigitalOcean */
+  ac_type = local.ws["ac_type"] /* Alibaba Cloud */
+  gc_type = local.ws["gc_type"] /* Google Cloud */
+
+  /* data volumes */
+  ac_data_vol_size = local.ws["data_vol_size"]
+  do_data_vol_size = local.ws["data_vol_size"]
+  gc_data_vol_size = local.ws["data_vol_size"]
+
+  /* firewall */
+  open_tcp_ports = [
+    "80",    /* certbot */
+    "443",   /* p2p websockify */
+    "8000",  /* p2p websocket */
+    "30303", /* p2p main */
+    /* only on node-01.gc-us-central1-a.wakuv2.prod */
+    "9000",  /* chat2bridge */
+  ]
+  open_udp_ports = [
+    "9000",  /* discovery v5 */
+  ]
+}

workspaces.tf

@@ -10,15 +10,23 @@ locals {
   env = {
     defaults = {
       /* Default settings for all fleets/workspaces. */
+
+      hosts_count = 1 /* number of hosts in each DC */
+
+      do_type = "s-1vcpu-2gb"        /* DigitalOcean */
+      ac_type = "ecs.t5-lc1m2.small" /* Alibaba Cloud */
+      gc_type = "g1-small"           /* Google Cloud */
+
+      data_vol_size = 40
     }
 
+    # Inherits defaults.
     test = {
       /* Settings specific to the test fleet/workspace. */
     }
   }
 }
 
-/* Makes fleet settings available under local.ws. */
 locals {
   ws = merge(local.env["defaults"], local.env[terraform.workspace])
 }