8000 update env yaml by pye-aung · Pull Request #1 · ThitsaX/mojaloop-iac-modules · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

update env yaml #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub 8000

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Dec 18, 2024
Merged

update env yaml #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 1 addition & 8 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1 @@
# iac-modules
reusable iac-modules

## Business Operations Framework (BOF) integration

For securing backend APIs with authentication and authorisation and provide login & logout flows for frontend applications, the Business Operations Framework (BOF) is implemented for both mojaloop switch and DFSP (PM4ML) deployments.

Please refer to the documentation here: [BOF Documentation](./BOF.md)
#Coming Soon
2 changes: 1 addition & 1 deletion terraform/control-center/init/control-center-post-config/terragrunt.hcl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -135,7 +135,7 @@ provider "gitlab" {
base_url = "https://${local.docker_env_map["gitlab_server_hostname"]}"
}
provider "minio" {
minio_server = "${local.docker_env_map["minio_server_host"]}:9000"
minio_server = "${local.docker_env_map["minio_server_host"]}:${local.docker_env_map["minio_listening_port"]}"
minio_user = "${local.docker_env_map["minio_root_user"]}"
minio_password = "${local.docker_env_map["minio_root_password"]}"
}
Expand Down
136 changes: 112 additions & 24 deletions terraform/control-center/init/environment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,43 +1,131 @@
region: eu-west-1
domain: mojaloop.live
tenant: labs11
domain: yourdomain.com
enable_github_oauth: false
enable_netmaker_oidc: true
enable_central_observability_grafana_oidc: true
ansible_collection_tag: v5.2.7-rc01
ansible_collection_tag: v5.2.7-on-premise
gitlab_admin_rbac_group: tenant-admins
gitlab_readonly_rbac_group: tenant-viewers
smtp_server_enable: false
gitl 8000 ab_version: 16.0.5
gitlab_runner_version: 16.0.2
gitlab_runner_version: 17.6.0-1
iac_group_name: iac_admin
netmaker_version: 0.24.0
letsencrypt_email: test@mojalabs.io
letsencrypt_email: testing@domain.com
delete_storage_on_term: true
docker_server_extra_vol_size: 100
loki_data_expiry: 7d
tempo_data_expiry_days: 7d
longhorn_backup_data_expiry: 1d
velero_data_expiry: 1d
percona_backup_data_expiry: 3d
controlcenter_netmaker_network_cidr: "10.20.30.0/24"
controlcenter_netmaker_network_cidr: "10.10.0.0/24"
iac_user_key_secret: "xxxxxxxxxx"
iac_user_key_id: "xxxxxxxxx"
envs:
- env: dev
domain: labsk8s604.mojaloop.live
vault_oidc_domain: int.dev
grafana_oidc_domain: int.dev
argocd_oidc_domain: int.dev
- env: hub
domain: hub.yourdomain.com
vault_oidc_domain: int.hub
grafana_oidc_domain: int.hub
argocd_oidc_domain: int.hub
netmaker_network_cidr: "10.20.31.0/24"
- env: test
domain: labsk8s604.mojaloop.live
vault_oidc_domain: int.test
grafana_oidc_domain: int.test
argocd_oidc_domain: int.test
- env: pm4ml
domain: pm4ml.yourdomain.com
vault_oidc_domain: int.pm4ml
grafana_oidc_domain: int.pm4ml
argocd_oidc_domain: int.pm4ml
netmaker_network_cidr: "10.20.32.0/24"
tags:
{
"Origin": "Terraform",
"mojaloop/cost_center": "mlf-iac-sandbox",
"mojaloop/env": "ft-sbox-rw",
"mojaloop/owner": "Samuel-Kummary",
}

all_hosts_var_maps:
ansible_ssh_common_args: '-o StrictHostKeyChecking=no'
ansible_ssh_retries: "10"
ansible_ssh_user: "ubuntu"
base_domain: "yourdomain.com"
gitlab_external_url: "https://gitlab.yourdomain.com"
netmaker_image_version: "0.24.0"

bastion_hosts:
bastion: "publicip"

bastion_public_ip: "publicip"

bastion_hosts_var_maps:
egress_gateway_cidr: "10.10.0.0/24"
netmaker_api_host: "api.netmaker.yourdomain.com"
netmaker_image_version: "0.24.0"
netmaker_master_key: "yourgeneratedkey"
netclient_enrollment_keys: "cntrlctr-ops"

docker_hosts:
docker: "privateip"

docker_hosts_var_maps:
ansible_hostname: "gitlab_runner.yourdomain.com"
central_observability_grafana_fqdn: "grafana.yourdomain.com"
central_observability_grafana_listening_port: "3000"
central_observability_grafana_root_password: "yourgeneratedpassword"
central_observability_grafana_root_user: "admin"
docker_extra_volume_name: "docker-extra"
docker_extra_volume_size_mb: "107400"
enable_central_observability_grafana_oidc: "true"
gitlab_bootstrap_project_id: "1"
gitlab_minio_secret: "yourgeneratedminiopassword"
gitlab_minio_user: "gitlab"
gitlab_runner_version: "17.6.0-1"
gitlab_server_hostname: "gitlab.yourdomain.com"
mimir_fqdn: "mimir.yourdomain.com"
mimir_listening_port: "9009"
mimir_minio_password: "yourgeneratedmimirpassword"
mimir_minio_user: "mimir"
minio_listening_port: "9000"
minio_root_password: "yourgeneratedminiorootpassword"
minio_root_user: "admin"
minio_server_host: "minio.yourdomain.com"
nexus_admin_password: "noeffect"
nexus_fqdn: "nexus.yourdomain.com"
nexus_docker_repo_listening_port: "8082"
vault_fqdn: "vault.yourdomain.com"
vault_gitlab_token: "yourgeneratedgitlabtoken"
vault_gitlab_url: "https://gitlab.yourdomain.com/api/v4/projects/1/variables"
vault_root_token_key: "VAULT_ROOT_TOKEN"
vault_listening_port: "8200"

gitlab_hosts:
gitlab_server: "privateip"

gitlab_hosts_var_maps:
gitlab_server: "gitlab.yourdomain.com"
backup_ebs_volume_id: "disk-1"
enable_github_oauth: "false"
enable_pages: "false"
github_oauth_id: ""
github_oauth_secret: ""
gitlab_version: "16.0.5"
letsencrypt_endpoint: "https://acme-v02.api.letsencrypt.org/directory"
s3_password: "yourgeneratedminiopassword"
s3_server_url: "http://minio.yourdomain.com:9000"
s3_username: "gitlab"
server_hostname: "gitlab.yourdomain.com"
server_password: "yourgeneratedrootpassword"
server_token: "yourgeneratedgitlabtoken"
smtp_server_address: ""
smtp_server_enable: "false"
smtp_server_mail_domain: ""
smtp_server_port: "587"
smtp_server_pw: ""
smtp_server_user: ""

netmaker_hosts:
netmaker_server: "publicip"

netmaker_hosts_var_maps:
enable_oauth: "true"
netmaker_admin_password: "yourgeneratednetmakeradminpassword"
netmaker_base_domain: "netmaker.yourdomain.com"
netmaker_control_network_name: "cntrlctr"
netmaker_master_key: "yourgeneratedkey"
netmaker_mq_pw: "yourgeneratednetmakermqpassword"
netmaker_oidc_redirect_url: "https://api.netmaker.yourdomain.com/api/oauth/callback"
netmaker_oidc_issuer: "https://gitlab.yourdomain.com"
netmaker_server_public_ip: "publicip"

bastion_os_username: "ubuntu"
10 changes: 5 additions & 5 deletions terraform/control-center/init/movestatefromgitlab.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,11 +14,11 @@
# export PRIVATE_REPO_USER= C6B9 nullvalue
# export PRIVATE_REPO=example.com
# export AWS_PROFILE=oss
cd /iac-run-dir
source setenv
cd -
source setlocalenv.sh
source /tmp/archivedhttpstate.sh
# cd /iac-run-dir
# source setenv
# cd -
# source setlocalenv.sh
# source /tmp/archivedhttpstate.sh
terragrunt run-all init -upgrade

cat <<'EOT' >terragrunt.hcl
Expand Down
17 changes: 13 additions & 4 deletions terraform/control-center/init/setlocalenv.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,8 +1,17 @@
export IAC_TEMPLATES_TAG=$IAC_TERRAFORM_MODULES_TAG
export CONTROL_CENTER_CLOUD_PROVIDER=aws
yq eval '.' environment.yaml -o=json > environment.json
for var in $(jq -r 'to_entries[] | "\(.key)=\(.value)\n"' ./environment.json); do export $var; done
yq '.' environment.yaml > environment.json
for var in $(jq -r 'to_entries[] | "\(.key)=\(.value)"' ./environment.json); do export $var; done
export destroy_ansible_playbook="mojaloop.iac.control_center_post_destroy"
export d_ansible_collection_url="git+https://github.com/mojaloop/iac-ansible-collection-roles.git#/mojaloop/iac"
export d_ansible_collection_url="git+https://github.com/thitsax/iac-ansible-collection-roles.git#/mojaloop/iac"
export destroy_ansible_inventory="$ANSIBLE_BASE_OUTPUT_DIR/control-center-post-config/inventory"
export destroy_ansible_collection_complete_url=$d_ansible_collection_url,$ansible_collection_tag
export destroy_ansible_collection_complete_url=$d_ansible_collection_url,$ansible_collection_tag
export IAC_TERRAFORM_MODULES_TAG=v5.3.8-on-premise
export ANSIBLE_BASE_OUTPUT_DIR=$PWD/output
export PRIVATE_REPO_TOKEN=nullvalue
export PRIVATE_REPO_USER=nullvalue
export PRIVATE_REPO=example.com
export GITLAB_URL=gitlab.yourdomain.com
export GITLAB_SERVER_TOKEN=yourtoken
export DOMAIN=yourdomain.com
export PROJECT_ID=1
0