/bookcase-ops

DevSecBookcaseOps

Primary LanguageShellBSD 2-Clause "Simplified" LicenseBSD-2-Clause

bookcase-ops

bookcase-ops ( or DevSecBookcaseOps if you want to throw in a couple more buzz-syllables ) is a series of packer scripts and ansible tasks to maintain the handful of machines I have running in that bookcase over there.

It mostly exists because we're now using Kubernetes at work and I feel I now need to burden myself with configuring and running this on my home servers as well.

Looking over my notes, this took about 4 weekends, spread over about 4 months (plus most of my Christmas/New Years downtime which I spent writing up all these READMEs), so hopefully this will save me / others having to go through all this again when I next have to upgrade all this high quality software product. Having said that, this is the second time I've tried to build a kubernetes cluster onto bare VMs; if you haven't done that before then maybe budget another month or two on learning how all that supposedly works.

And you know, when I inevitably kick the bucket, my immediate family, who have difficulty selecting a different HDMI input or operating a printer, might be able to salvage some of my life's work. Which they won't be able to appreciate or comprehend in any way. I guess they could admire the punctuation or something. I have a niece starting computer science this year though, so I guess hope springs eternal.

What's in the box ?

Okay so what you've got is:

  • setup - a few READMEs describing how it fits together and what prerequisites you need installed
  • packer-ubuntu-mysql - a packer script to create a VM to run MySQL 8.0 and vault , on ubuntu 22
    • This'll need to be the first virtual machine you create, as it will contain the vault server holding the secrets used in configuring kubernetes
    • SETUP-VAULT.md - setting up vault
    • SETUP-CERTIFICATE.md - setting up a certificate authority (CA) and the site certificates used later in kubernetes ingresses
    • SETUP-DATABASE.md - setting up the db schema and user for xwiki
  • SETUP-RESTIC.md - setting up restic. This actually runs on the NAS, but we need to create certificates for it, so we're setting it up here after the CA has been created.
  • packer-ubuntu-kubernetes - a packer script to create a kubernetes 1.25 cluster / API server running on ubuntu 22
  • packer-ubuntu-kubernetes-node - a packer script to create a kubernetes 1.25 node running on ubuntu 22
  • ansible - an ansible repository which deploys the following into kubernetes
    • nginx-ingress - to handle traffic into the cluster
    • democratic-csi - to handle storage for k8s pods ( connects to the TrueNAS SCALE box over NFS )
    • prometheus - monitoring
    • grafana - a dashboard for the statistics captured in prometheus ( once it's running, see SETUP-GRAFANA.md )
    • gitlab - a gitlab server
    • nexus2 - a nexus2 repository ( to hold java artifacts )
    • nexus3 - a nexus3 repository ( to hold docker artifacts )
    • xwiki - a wiki

The packer scripts are designed to install virtual machines in the free version of ESXi 6.0 server, but could be used to deploy into other hosting environments easily enough.

Everything is hosted as subdomains of .dev.randomnoun, which isn't a real TLD. So if you're copying any of this you may want to search and replace that to something else.

I'm configuring the DNS and certificates manually ( see the SETUP docs above ). I guess I could virtualise that up as well if I'm feeling up to it.

Links to the things running in the cluster

Anyway once everything's running, you should be able to connect to the following in a browser:

License

bookcase-ops is licensed under a Simplified BSD License.