From: Todd Malsbary Date: Tue, 8 Mar 2022 18:33:07 +0000 (-0800) Subject: Add virtual multi-cluster example site X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=commitdiff_plain;h=e245fd4e27d4a98ca91c0acfa1a1325b695c9581;p=icn.git Add virtual multi-cluster example site Signed-off-by: Todd Malsbary Change-Id: Ifa7c9e01b620dde901bbf11c3f78f5094060aa7b --- diff --git a/deploy/site/common.sh b/deploy/site/common.sh index 0837570..006f550 100644 --- a/deploy/site/common.sh +++ b/deploy/site/common.sh @@ -28,34 +28,48 @@ function export_gpg_private_key { function sops_encrypt { local -r yaml=$1 - local -r key_name=$2 - local -r yaml_dir=$(dirname ${yaml}) + + local -r key_name=$2 local -r key_fp=$(_gpg_key_fp ${key_name}) + local site_dir=${yaml_dir} + if [[ $# -eq 3 ]]; then + site_dir=$3 + fi + # Commit the public key to the repository so that team members who # clone the repo can encrypt new files echo "Creating ${yaml_dir}/sops.pub.asc with public key used to encrypt secrets" - gpg --export --armor "${key_fp}" >${yaml_dir}/sops.pub.asc + gpg --export --armor "${key_fp}" >${site_dir}/sops.pub.asc # Add .sops.yaml so users won't have to worry about specifying the # proper key for the target cluster or namespace - echo "Creating ${yaml_dir}/.sops.yaml SOPS configuration file" - cat < ${yaml_dir}/.sops.yaml + echo "Creating ${site_dir}/.sops.yaml SOPS configuration file" + encrypted_regex="(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)" + cat < ${site_dir}/.sops.yaml creation_rules: - path_regex: .*.yaml - encrypted_regex: ^(bmcPassword|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + encrypted_regex: ^${encrypted_regex}$ pgp: ${key_fp} EOF - sops --encrypt --in-place --config=${yaml_dir}/.sops.yaml ${yaml} + if [[ $(grep -c $(echo ${encrypted_regex} | sed -e 's/(/\\(/g' -e 's/|/\\|/g' -e 's/)/\\)/') ${yaml}) -ne 0 ]]; then + sops --encrypt --in-place --config=${site_dir}/.sops.yaml ${yaml} + fi } function sops_decrypt { local -r yaml=$1 - local -r yaml_dir=$(dirname ${yaml}) - sops --decrypt --in-place --config=${yaml_dir}/.sops.yaml ${yaml} + local site_dir=${yaml_dir} + if [[ $# -eq 2 ]]; then + site_dir=$2 + fi + + if [[ $(grep -c "^sops:" ${yaml}) -ne 0 ]]; then + sops --decrypt --in-place --config=${site_dir}/.sops.yaml ${yaml} + fi } function flux_site_source_name { diff --git a/deploy/site/secrets/certs/cluster-1/ca-cert.pem b/deploy/site/secrets/certs/cluster-1/ca-cert.pem new file mode 100644 index 0000000..56cbc0c --- /dev/null +++ b/deploy/site/secrets/certs/cluster-1/ca-cert.pem @@ -0,0 +1,32 @@ +-----BEGIN CERTIFICATE----- +MIIFcDCCA1igAwIBAgIUZwnGv3eUzB8cYeI6iLlCra8bAvcwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyN1oXDTI0MDMwNjIzNDUyN1owTTEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMR0wGwYDVQQDDBRFTUNPIEludGVybWVkaWF0ZSBDQTESMBAG +A1UEBwwJY2x1c3Rlci0xMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA +wdCYBb+dRfdny0u6TEx6sXVemU884zqXjoSNACgE7IhnGxtOfxRwy2eTwNP656Bp +16iuzT1ghbI/0H6Who61ldAqT4VBRfwcey0BvO4/hAMbyZNpDnoeTbGRG66muQ5k +ggU6E7Qm/boZCRzvKYt2MqDoFDh1ksRDh0rw+oqeHPQeFkFlTZj96fV/nMQLnYiE +HWHLAIt59YWX8/v1OyBd9HbuOQ7j5mlz6puH74udAhd7cHPj3w0UHpZi48eMZic9 +tDtv6O3nnuLC6K2ztQuoePFlt4ferbsI9kYhnF2xqQfThXKF9h+5U5mTf6cbbweR +1v98kRcs7FtGT6Rv4deavt67i8gWK1TXMKskUtRxv4IjlR/U3FovnqDkkREt/r/w +mncZg96la3b1G4RhsQY1MIq8bfIYMsX63kj6LXAqzcFhRyb6XTiVkvNwbkosyLhG +HxwPkiAmYhqSLVwg+AgD0+vYAtIHolU/9ISPJeGBh3Scx2YIxqk1Lba9ZR53e4Ls +W0LnKt/YeANySuhA0pLLIvtW6y71LKMfbm6HoHpcg4lp9WFcDqKteZU63+apPrhX +brXpGvnFc1/uYy/AS8mfkKo95cWlZPbj3qNO4p5IZKpL1nSMzU2wuiz5wICL4k4H +UT0vduyk2cCJ9Rm7mr9T4VivDVVqIrC8rnrMV5HqLUsCAwEAAaNpMGcwHQYDVR0O +BBYEFOHZ3ruNLaiNAp+nfBwvo0C9cHpaMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYD +VR0PAQH/BAQDAgLkMCIGA1UdEQQbMBmCF2lzdGlvZC5pc3Rpby1zeXN0ZW0uc3Zj +MA0GCSqGSIb3DQEBCwUAA4ICAQCE/XUPyzTM+sE1DHDbbQHZAeDuNznIhslsPzPu +hyNGuLABhOoA/b3PqbKpidvlh/cDlwjiay9dJafEHepOGzY0pTKeZb46secAw7sZ +5rFZCOXeRvfpXd4wztQAdDxElRVS35bQsAnwCny38xL98KsrQug43+f9iiH5eyhp +lPUk/5IwLtLXdgXP4Z3sv1b0YQAAy7veOiUF59ol/eQHnwDZL0q3ENDBn8FiQfF3 +BjEZhbjeJJTWKz3xD8W7/y0VKE+9yzMkMncpoXIpjkCD8ucrc22fYglqWxmDfcom +5ho7n4cKK7AKN9Dn1RAGYCaeSVHqqH5cZAxmPycx22I0xWY69iB7fbh3ozhqNB+H +IkeGXTv8A6PAebyKcSg/bTzkFWowEbgtdadFta50bUqfvis042TH0K2xmyQsLOUJ +vkjUI0QrZKAeGTl6kySRTIlTKI/q24uYpwNRe18eQLv6eBnBC67/ZxoCFyh/pl4H +nFHPPTvE0y7V99PHEdfLF2TE7jm+XLQXtf06b8JaOsMjOEVbb4Pi0o904oyIvn6l +w0dXMKIQ1wMoSz0RQrACHjI1UNBSTTF+GgBTgmad9aHYTlXImnzFu4aPE5Vyqdtu +zv+6QwVb7S17AcPvWf/qL927eTJchjz65HemxcfIplByptSwW2BvCnxXBEbxmczA +CZ3QyA== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/cluster-1/ca-key.pem b/deploy/site/secrets/certs/cluster-1/ca-key.pem new file mode 100644 index 0000000..2abc0ad --- /dev/null +++ b/deploy/site/secrets/certs/cluster-1/ca-key.pem @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKAIBAAKCAgEAwdCYBb+dRfdny0u6TEx6sXVemU884zqXjoSNACgE7IhnGxtO +fxRwy2eTwNP656Bp16iuzT1ghbI/0H6Who61ldAqT4VBRfwcey0BvO4/hAMbyZNp +DnoeTbGRG66muQ5kggU6E7Qm/boZCRzvKYt2MqDoFDh1ksRDh0rw+oqeHPQeFkFl +TZj96fV/nMQLnYiEHWHLAIt59YWX8/v1OyBd9HbuOQ7j5mlz6puH74udAhd7cHPj +3w0UHpZi48eMZic9tDtv6O3nnuLC6K2ztQuoePFlt4ferbsI9kYhnF2xqQfThXKF +9h+5U5mTf6cbbweR1v98kRcs7FtGT6Rv4deavt67i8gWK1TXMKskUtRxv4IjlR/U +3FovnqDkkREt/r/wmncZg96la3b1G4RhsQY1MIq8bfIYMsX63kj6LXAqzcFhRyb6 +XTiVkvNwbkosyLhGHxwPkiAmYhqSLVwg+AgD0+vYAtIHolU/9ISPJeGBh3Scx2YI +xqk1Lba9ZR53e4LsW0LnKt/YeANySuhA0pLLIvtW6y71LKMfbm6HoHpcg4lp9WFc +DqKteZU63+apPrhXbrXpGvnFc1/uYy/AS8mfkKo95cWlZPbj3qNO4p5IZKpL1nSM +zU2wuiz5wICL4k4HUT0vduyk2cCJ9Rm7mr9T4VivDVVqIrC8rnrMV5HqLUsCAwEA +AQKCAgACa0oaeEPMRcRD41QV87ZsVJyzqSuHYonVu43O/LDjCujOi861A1pND6Pm +ej7deUEY8gAMi8GSqaDmR041q75Uel6s02r3JqhsWSl2ZDriuO812uMqzRdnvNmk +0M8/7BARF2OcL1l1PUdmt7e8ewMkqqF67yF4jX6SR7suRWCn19wwRuyuxUQWEXxg +Roomkzei7j+MaDFDgUFeSDzNWiASFxHuIGNz0skhmoNd2A5DomtmAexMMmuX3iSp +1ynHdKHuh/djnuSPNSFdqh1eGyElMU4ltkpvPLBl8oYk336CL5jSR5WodsjnZDlV +FI7hGeUWG+ZAIVvsL093WwQSe5Bw3959MB7gosxtVIT2Ka2mFDiXt0boaOJe9GrF +GzkI9m8OORJQzLaX1zFpEUvAYGndokMM8fcnSxhVJzI97wB+oyA7FMvsTpgwn5gE ++3bgI9SctGrawlaPB9Ww/ngM9ItxvOY6YGe3KbrLzsulD5kUVCWGAxUiEbDyaX8m +pJz4mXMx5hSc4/KVdBI8ffhjNWlEk9ZoQYQoK1NM6NqVvlI58u1l/77+nN3r5wPx +KrKqaMBikY1tkbOXngustGz6Q9GaD4bh4uNJ40/SZfHSL90NeTID8At8wQOTaYvc +ay7WDwGDJ5+0DMXQ+d6jtr3bduDKUvr7Pa+DOs0If4no1+YAwQKCAQEA8eMWzkAA +G8ZPOnSsxZZkrpJ2a9EzS/Lv5GaMgoDjASotULKG+WvQ31jkiuPYIH+m95Mq+l+B +2tR3zIvfJVpwey4AB57iNxG2gdaJLEaYYnkd+CL6bE8qa7s1sAe/Ugy4q2cNf2ZK +GcCcLN8PW3yUIzozGowQoZsxZ/9hlF3u4mDoVY3drmS2hwZ/gyJct+02jjmIYoU8 +Cn4F09uEGice/IyrihQbYuooDefk+5Hv2xvUPsFpLtk/cA9lF4pSLmPP3vE/F3EI +NIMmGtCwVhCLkl/BFeWdQWMcgzOdFAQetRVz8sKu4krD+PT7phwLdbTfhux2OyaJ +iNQfwHegVmQEewKCAQEAzR97C1d/MnleU816q2Uh6KNKjuPWL8rQ6kU1YZDiU7zV +Ay6yFtzLew1slRasZ9Lwz6kyYDf782drA9F5F1rODtkUukU6X999Xz+VKTXN2GHO +Hm3KB00WYuC5B8gIVDJ66NLT83ZKoslZGKQ9kT3ujYT0fxRyzHKFPprrM9gTEUYt +DRxIouhdImLa+nAWJxRhwK3xiBVHwrufoveo7GxjkDK/x/K2lBgz0TsjZxM0whHh +Nq/LGgz2teHjJhSV1hx+uDoOp5PihIC7vGAceUcT2h3NXtVBarai8ftaLYvBxOSr +fNsLfY/+F9HRli7UiMJO4P/cXuEK+YIgYzNsLr2pcQKCAQA7zYRW69XbCBWQg0Yv +97Xev1FN6MQA9AhBdOUqYsk9AXuApxLd2b0jayvd9uT5a/YQ4a7Phgtp2fvgc3hx +GMIUglP5jlupd9SilzME4lNMjVtOfP9jBdOcHQXyBohTtdd2cR0SMW0Cnu893MxE +NzG83+fAmX6HJgJ6DtbGQs8L4x+t/0wekMHb8kxWVImN47UIRsskaIJmqa+xKGWp +vaBYmkLS+ZOnyfKrNXkUhYlCp8e62EC0F3wqrXO19TnKRF0hZo3NsuFvcjlaidv+ ++0o2nzvyuPk/MEzdV0Zvq3EYHjyzeVSZmBiJlbAd6nMe3+Af0JiOmUGJtcA/6pOW +qFW/AoIBAEwfL6mA2gpgMhpFeg2bJV9RIf0vHjB0Qt19u5aujt9mh2J79Mk5PSY4 +UCBv3qFVDdryvmgovo6QxY0QMrDxGOE3vFJ4GHa12K/9R5yYhACWI0j1k3DsMa+W +F/SETlr4tNYsT03di0soD7FuWg7Jffr06UszynqG0V3vXfPKbyEM+vEPmwEh3FZD +e2JPMFlmXfSEWMsYop3oxRBUelLq0nQT8UoBj7Ib3Tb7jGLXJNAUlJCX4naTcwcC +giqCnyxrPLefjAqyffCQWZtJy6dSMlLSloFoALPafVPx5IBcihdIiT93hqcdRb2P +NwlV7bem7GDhcuWe/FSl7uEBl1ctOXECggEBAO9DY2mDvvtNFbREemvBfBDOUVoX +kDlYSTp18CtgFAUGT7dkeG+KJpEVOKR7SZHqRMhSAyi2fqr+CO49sS986GCczDQA +MUJBFUCVpJvpHkF1ZmxV1ya4QU9TUwQPgLXpTfV4jKU1m0Hp4e7V9WsFvXwespjh +UpLWG6jJPenWyxL3v6eVZ8B2YFjjcrvYxomLA8M6unLdadWfZ0AuxDIDuUErUBhA +lRWM3+G5l9w3pE3ol4KDjC22xRfkHH9I57aE6Y+wPIro7upqJDeOoAC0CW1EgRew +YCPydzIY4BZhD4eFB2EH164JCzzHk3Q0JR2kP5mSNU064ZWxOqRt/xmRLDA= +-----END RSA PRIVATE KEY----- diff --git a/deploy/site/secrets/certs/cluster-1/cert-chain.pem b/deploy/site/secrets/certs/cluster-1/cert-chain.pem new file mode 100644 index 0000000..ddb6542 --- /dev/null +++ b/deploy/site/secrets/certs/cluster-1/cert-chain.pem @@ -0,0 +1,62 @@ +-----BEGIN CERTIFICATE----- +MIIFcDCCA1igAwIBAgIUZwnGv3eUzB8cYeI6iLlCra8bAvcwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyN1oXDTI0MDMwNjIzNDUyN1owTTEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMR0wGwYDVQQDDBRFTUNPIEludGVybWVkaWF0ZSBDQTESMBAG +A1UEBwwJY2x1c3Rlci0xMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA +wdCYBb+dRfdny0u6TEx6sXVemU884zqXjoSNACgE7IhnGxtOfxRwy2eTwNP656Bp +16iuzT1ghbI/0H6Who61ldAqT4VBRfwcey0BvO4/hAMbyZNpDnoeTbGRG66muQ5k +ggU6E7Qm/boZCRzvKYt2MqDoFDh1ksRDh0rw+oqeHPQeFkFlTZj96fV/nMQLnYiE +HWHLAIt59YWX8/v1OyBd9HbuOQ7j5mlz6puH74udAhd7cHPj3w0UHpZi48eMZic9 +tDtv6O3nnuLC6K2ztQuoePFlt4ferbsI9kYhnF2xqQfThXKF9h+5U5mTf6cbbweR +1v98kRcs7FtGT6Rv4deavt67i8gWK1TXMKskUtRxv4IjlR/U3FovnqDkkREt/r/w +mncZg96la3b1G4RhsQY1MIq8bfIYMsX63kj6LXAqzcFhRyb6XTiVkvNwbkosyLhG +HxwPkiAmYhqSLVwg+AgD0+vYAtIHolU/9ISPJeGBh3Scx2YIxqk1Lba9ZR53e4Ls +W0LnKt/YeANySuhA0pLLIvtW6y71LKMfbm6HoHpcg4lp9WFcDqKteZU63+apPrhX +brXpGvnFc1/uYy/AS8mfkKo95cWlZPbj3qNO4p5IZKpL1nSMzU2wuiz5wICL4k4H +UT0vduyk2cCJ9Rm7mr9T4VivDVVqIrC8rnrMV5HqLUsCAwEAAaNpMGcwHQYDVR0O +BBYEFOHZ3ruNLaiNAp+nfBwvo0C9cHpaMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYD +VR0PAQH/BAQDAgLkMCIGA1UdEQQbMBmCF2lzdGlvZC5pc3Rpby1zeXN0ZW0uc3Zj +MA0GCSqGSIb3DQEBCwUAA4ICAQCE/XUPyzTM+sE1DHDbbQHZAeDuNznIhslsPzPu +hyNGuLABhOoA/b3PqbKpidvlh/cDlwjiay9dJafEHepOGzY0pTKeZb46secAw7sZ +5rFZCOXeRvfpXd4wztQAdDxElRVS35bQsAnwCny38xL98KsrQug43+f9iiH5eyhp +lPUk/5IwLtLXdgXP4Z3sv1b0YQAAy7veOiUF59ol/eQHnwDZL0q3ENDBn8FiQfF3 +BjEZhbjeJJTWKz3xD8W7/y0VKE+9yzMkMncpoXIpjkCD8ucrc22fYglqWxmDfcom +5ho7n4cKK7AKN9Dn1RAGYCaeSVHqqH5cZAxmPycx22I0xWY69iB7fbh3ozhqNB+H +IkeGXTv8A6PAebyKcSg/bTzkFWowEbgtdadFta50bUqfvis042TH0K2xmyQsLOUJ +vkjUI0QrZKAeGTl6kySRTIlTKI/q24uYpwNRe18eQLv6eBnBC67/ZxoCFyh/pl4H +nFHPPTvE0y7V99PHEdfLF2TE7jm+XLQXtf06b8JaOsMjOEVbb4Pi0o904oyIvn6l +w0dXMKIQ1wMoSz0RQrACHjI1UNBSTTF+GgBTgmad9aHYTlXImnzFu4aPE5Vyqdtu +zv+6QwVb7S17AcPvWf/qL927eTJchjz65HemxcfIplByptSwW2BvCnxXBEbxmczA +CZ3QyA== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFKDCCAxCgAwIBAgIUC95kUgcVNhO2wLmzfpdu4+xN0oUwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyNVoXDTMyMDMwNDIzNDUyNVowLDEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENBMIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe +0QplSFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIG +bTr9pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoK +xKp7SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3 +poaMV85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCS +JlMhwxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5 +dj1s31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdpt +RoDYpJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENw +j3FaqSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8I +bWAECghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJ +Oo+npMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUC +AwEAAaNCMEAwHQYDVR0OBBYEFGuwgWa8wXsYJLz0v7eNpIXuZVXoMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgLkMA0GCSqGSIb3DQEBCwUAA4ICAQCtwouv +zpFKITD7fYibHg1at3qQvZQa2+4qCjfmWIrrpcaWIcc3tP79lLbtvUsw5y2U29Dg +4UJ4j/zKvfljc+INt3ltSeQSlN5DrblNlvuy4+q0cSlYX4diPfERsxH1mvoJlGt9 +Wzi+4jAq+TXPBg4uhdfLbkBEk7cdoavpBAKgx304oHzmhVKixw3Jw2k8y1LTqgD/ +2mRS+NFyh/jna9o3GfE4i5IpsTUnQVPhAKm/FmH8IGzpqlHw+s5upK3pktJBkthr +jjI4tMU9nymuLuI3lw7ucdPJSCW2luOgkljQv8WJGaLEnwUXRxXOGHdusQ1ARPsZ +injbMDtnnWuJsnZu4M3+B/19jmJstiqZHvp+DQTia5VSewIuia/VQ7zkKcJvGez3 +e3JsS9jvn1FqN7KEOuC8U17DyQHv2OiKHFTw3b2SvkBG5Pa9d7ATlXKIDkLj1BWa +MUO3KxTCHLkQOeVZO8ctwPnemOYbeWn1bfMt0EcGHXmMhz0bng1CFCc1Nznw0LnE +RcxU799r4RLbl2R2q0nihLml74Ko57YkGqQFJ+JBcLSugFIV0gveOezlf+vayp55 +X3CRxw7uwYlacSlQWrGuO3tnS3EdAAigACoA8ugYNDFFasXY/BNmwkhvEIiRryOT +tBfPBLZpBd38zYrMzk5OnJI+4daHH03MQ9MM7w== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/cluster-1/root-cert.pem b/deploy/site/secrets/certs/cluster-1/root-cert.pem new file mode 100644 index 0000000..dbbb4fe --- /dev/null +++ b/deploy/site/secrets/certs/cluster-1/root-cert.pem @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFKDCCAxCgAwIBAgIUC95kUgcVNhO2wLmzfpdu4+xN0oUwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyNVoXDTMyMDMwNDIzNDUyNVowLDEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENBMIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe +0QplSFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIG +bTr9pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoK +xKp7SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3 +poaMV85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCS +JlMhwxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5 +dj1s31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdpt +RoDYpJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENw +j3FaqSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8I +bWAECghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJ +Oo+npMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUC +AwEAAaNCMEAwHQYDVR0OBBYEFGuwgWa8wXsYJLz0v7eNpIXuZVXoMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgLkMA0GCSqGSIb3DQEBCwUAA4ICAQCtwouv +zpFKITD7fYibHg1at3qQvZQa2+4qCjfmWIrrpcaWIcc3tP79lLbtvUsw5y2U29Dg +4UJ4j/zKvfljc+INt3ltSeQSlN5DrblNlvuy4+q0cSlYX4diPfERsxH1mvoJlGt9 +Wzi+4jAq+TXPBg4uhdfLbkBEk7cdoavpBAKgx304oHzmhVKixw3Jw2k8y1LTqgD/ +2mRS+NFyh/jna9o3GfE4i5IpsTUnQVPhAKm/FmH8IGzpqlHw+s5upK3pktJBkthr +jjI4tMU9nymuLuI3lw7ucdPJSCW2luOgkljQv8WJGaLEnwUXRxXOGHdusQ1ARPsZ +injbMDtnnWuJsnZu4M3+B/19jmJstiqZHvp+DQTia5VSewIuia/VQ7zkKcJvGez3 +e3JsS9jvn1FqN7KEOuC8U17DyQHv2OiKHFTw3b2SvkBG5Pa9d7ATlXKIDkLj1BWa +MUO3KxTCHLkQOeVZO8ctwPnemOYbeWn1bfMt0EcGHXmMhz0bng1CFCc1Nznw0LnE +RcxU799r4RLbl2R2q0nihLml74Ko57YkGqQFJ+JBcLSugFIV0gveOezlf+vayp55 +X3CRxw7uwYlacSlQWrGuO3tnS3EdAAigACoA8ugYNDFFasXY/BNmwkhvEIiRryOT +tBfPBLZpBd38zYrMzk5OnJI+4daHH03MQ9MM7w== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/cluster-2/ca-cert.pem b/deploy/site/secrets/certs/cluster-2/ca-cert.pem new file mode 100644 index 0000000..8619daa --- /dev/null +++ b/deploy/site/secrets/certs/cluster-2/ca-cert.pem @@ -0,0 +1,32 @@ +-----BEGIN CERTIFICATE----- +MIIFcDCCA1igAwIBAgIUZwnGv3eUzB8cYeI6iLlCra8bAvgwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyOFoXDTI0MDMwNjIzNDUyOFowTTEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMR0wGwYDVQQDDBRFTUNPIEludGVybWVkaWF0ZSBDQTESMBAG +A1UEBwwJY2x1c3Rlci0yMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA +uHjubs3G+LEO9LnYarywet8PNj1gzMKuM9a1eJhjrYP1j5/P8klildRr1M5qh0U9 +mRplbQBB6s929qQHb3GaKYIXPpS/XAOKfKf+IyqPcFMNGgPtaLixzPx7p0q2alOZ +2eQNHT8uk/V8dxoARzJUioDX+0YoVc0eS7vc0DlTfMFeuwjX9m++7ktn2+1cdq1L +6rCYcdq5K6ZXeh0/cbA88Rwx3geiLxxNEdfiv/18TgkCQ9XE/HQza+goikVs1I9f +ILxYtG+HjdHIs+n0GmXYKe3kO5kwfFoAUG2lsrV8EXm3g1+yR2/aZAIEEoGWMScz +bNbqM/wqtLKDNZ9LLCYq2C9u4/SdK3dGs6SqP6lmToIIEThQztyMDTdOemvipgXC +1r+7xEbfpvBiVgyylJnuJlpbt3H+xfB/btGnR7+Ond3psnRnaS+E5XeuqXAEEI/B +kC0pSc72W3OMwsaGahdrgiJsUcDgdN9obaRMJMFesSj0A76JgSD9Ko4wsQoLqbfe +6v+fCdTEH6zwyamQU1lb2K3G0yOlfs3iVizZaIDkJWCr/g0Gnh3cy1LGCQJojxPy +QI3P8oQTsfxXjIzkpSolQriadmlPqiDLEytcx+LmW9z1WhmCkKri0ceVJRSN8bUn +kvWIPtUAybDK3uMAMpsrrAE80YCoXpxv0xeF0OFJZrsCAwEAAaNpMGcwHQYDVR0O +BBYEFDKrLUFl/InRytQRvH1Dqf7ik1/zMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYD +VR0PAQH/BAQDAgLkMCIGA1UdEQQbMBmCF2lzdGlvZC5pc3Rpby1zeXN0ZW0uc3Zj +MA0GCSqGSIb3DQEBCwUAA4ICAQB6liV0hMF6peU7dByN5O5qxw2V1XFik82Vh7EC +LX9oiYiV5h0psE5pzw0t467HOsPzEt8UyHMqbxEuOpAugRI6z3dJZlU09lMFESH9 +2vh4c7FJlFdzlDHRiKUaSksI+cX7EsEm6TxpZ4vfAQ+k4NqHTX2ed8fQGZp6jrLG +6BQeb1Co4yNSl7JhrSnxIH6hMJkViILAiEFKq9/T/jLLNr2QUJC42XdfdESMdlHt +EHb5myJz7rxufLV31QLOK2ZTNuWiH/mf/7dVeSK3kNi18EBWFLB/FmeOpHtM7vNp ++Yc8WJ/OHE0eqdrQPecDWmDl26qx86ZBg3aoEPfRgRcnWmTcY4E24HHxsIvYVEkC +F/FdaUg/ikxx5MTPKn5K1zh8y8l6fmHE0gXizPQ1V45Pa4XSyLLthsuWfVt1HQl+ +xr4X4pYgOgkO8MGhXDVd8NavWLD+zS79fTdgr1eX5AAimI36QmSnhrYG+GtqyKFL +b5Zr2J4PCMFkf1rkG1Q9dDXHczH/ld5GGEoEvjFR2OF204dyckjdo5UTQFm3oooU ++tatg65eDXTvM8wsqCywY8qVpfFl6Z2cemS8Pjs724KZl0CqfO+07dgiU/cPZfEJ +DcF1eZBDyAAXJJVEU8pB7/npyE8WsleESelHAMYbldwguhAhkvoFYvYAFh7VkLjt +U2gKbw== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/cluster-2/ca-key.pem b/deploy/site/secrets/certs/cluster-2/ca-key.pem new file mode 100644 index 0000000..298815f --- /dev/null +++ b/deploy/site/secrets/certs/cluster-2/ca-key.pem @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKAIBAAKCAgEAuHjubs3G+LEO9LnYarywet8PNj1gzMKuM9a1eJhjrYP1j5/P +8klildRr1M5qh0U9mRplbQBB6s929qQHb3GaKYIXPpS/XAOKfKf+IyqPcFMNGgPt +aLixzPx7p0q2alOZ2eQNHT8uk/V8dxoARzJUioDX+0YoVc0eS7vc0DlTfMFeuwjX +9m++7ktn2+1cdq1L6rCYcdq5K6ZXeh0/cbA88Rwx3geiLxxNEdfiv/18TgkCQ9XE +/HQza+goikVs1I9fILxYtG+HjdHIs+n0GmXYKe3kO5kwfFoAUG2lsrV8EXm3g1+y +R2/aZAIEEoGWMSczbNbqM/wqtLKDNZ9LLCYq2C9u4/SdK3dGs6SqP6lmToIIEThQ +ztyMDTdOemvipgXC1r+7xEbfpvBiVgyylJnuJlpbt3H+xfB/btGnR7+Ond3psnRn +aS+E5XeuqXAEEI/BkC0pSc72W3OMwsaGahdrgiJsUcDgdN9obaRMJMFesSj0A76J +gSD9Ko4wsQoLqbfe6v+fCdTEH6zwyamQU1lb2K3G0yOlfs3iVizZaIDkJWCr/g0G +nh3cy1LGCQJojxPyQI3P8oQTsfxXjIzkpSolQriadmlPqiDLEytcx+LmW9z1WhmC +kKri0ceVJRSN8bUnkvWIPtUAybDK3uMAMpsrrAE80YCoXpxv0xeF0OFJZrsCAwEA +AQKCAgA8c/0HOM5cz4FsN78xc3aOPa05hDHFyILYICPGSoJX6ae+kovOBbiWC0/v +JFoKzGkcVGcqqmvvrF97AlQhdGQl+Cjv7EUtvUdUBKWnFpp9H+pqPSE/MU+rMo6/ +Sx+uhokju7WEgSEdgdRxH4c5zcegwAqHoP006Qxlm0IIxtCSULhfqM1FSGeUpgd6 +LjYf+jinx4mdviTypgeC0DTrZ+sAxNGexnei4q5rC4mWi1aCKDeizVpJtTboxOMM +NSYuHnH5Q1/6eZY9pqMUOrYxNHD7hKdH1LLr/X6e3N/xScJH49B88A53lLNIFNUK +z4bNwt/6ag/ES34fS2TuXK6A4F0nfvPhMuvFkvyDf8CHXLQvgG680hZA9GorONKC +yEKs9Z+zwFRQH8QxZ43Pih6f6GOYdlCTV2MeWJLDsXtWlQolxuhk12FZ3hXkAdTk +i6ibkNUaC+VGskV+4Ei0cW1d9rpEkFV3QVLxF3dAYmJAYQ66VGwwKetqVggal4Jj +i68vRmNozejpbyeju/yFt5Hmrdxdu3R3WGkdAh11RU5d8vKWd9h/Bwj5/h6ThNc8 +fRCr2MhJx1l6HBiL6B1IwYOVpznpptJABSh0H9Rx0VZAhM+EbP/O+ljimreyvyqS +6SLI56RoJF926uj4Z1MFcCvg8E9eBgxXoOAQl6mqrtWvqa1vkQKCAQEA5dalfQ+d +auuOvINea167mE869M9U/NeZkt2yg3N9NvHgABBmQSMo59kPbaEZoTXo312y3sJg +dj6UFKj5kU4jUolOP4OVsst8TYEHh1MlwhZ9rIORCmNqq7KFskXQT7KdXwYfP/Dl +DXc0psaMjMIASK/WHaBB8XB5e++07Fu1MEVqL7vNPtA4un45eCKgfvqZ2RnZH8Qi +sJaPy18eN1aIikjG2QQD5kC1Hk8BOyo+F31MAPOf2ad1ZNiAxA82fkV16D2IiTU6 +jBPHWvz0MxUGwluVqHmPlEytLUTQNg81J70+78KpQUev4nqR1PS4r/OU3CpkatmD +d3oeyxkFwurDQwKCAQEAzXhYUsHRJbVPpdeTmCwFnv6QecybCdoA0diSF9VhYBYF +tSS9jt52JT+QKrrS1/hevNADBqk9FdQMSR8PXwG8ROex/Erz4Tv6eDS7bCnyi8Se +IVhkM+nz6w5zQ74okMHy+fGLNniM3v2DfjMc5Go0zUKV/xT9OoKvAHtUzEFE4rrN ++gDgfj5Xl8t/+B99huraBA3i6ougzhuRI15Jpt3Hn8WUKKaO1S6GYGRfQOsIxWLX +r1pwqSziIAXGuViPKrSOhkuEMLLl0j0loDGmzup01wluf5pLXWLVvlTWFRpcKhWk +IDDMfJyuMOunVSRpN4+ySXt9jj+ll5/dv9bcdR7LKQKCAQAtaYTXOf+bgaF5Q+ej +BVvBk14Nwu2C68KPTziXWnlSIuZkfNkHY8AQV0YCHkOnI7S4dZYDB5rxohm2H1D4 +Ud0O0MxiJkisxCHyWl03cslSGQmJzZEZ4VzRQfvCpqKrLJqFjPsdsiY/y97eWPqq +USanNf7zaZe98cA/KbSwwsoBGKYLemrqT0/2ITyPrR/TFwbQ65eH/EPyaj1NLKUW +wAVIdWq8tFtk4kInE+slWopcL8iVo41g/wJmA5Ulp+/XcTgDxCy3F4pS5RGNu88w +TKZCPsBKQoKJBcFt4VvWYpjZGj5WNzskB9sLv7YSwqu/MDyoZ8PhjMq6D6oH7RDD +W4lrAoIBAQCsbbABUzGHKY77p9vuuhLFiPAJptD9BXvmno6LfcBH+HM1vu1s9ffD +7oG3uiyynXYzkYTYlDH1HYxp2Kz3l+c9FAtjpCrh+4mIUwhuDw3CiXACn8EHZ/AQ +dIH6eZxlTr3vTur6/VOK1skAoTg/33kMQDLMa/rOnVjrWJSjDKsYcpfkk9PRXdP4 +SQjNWu/mxzPKbzTci+yYyr2UJs48QKYDyLU7H/uBn5eZUOI3AobLztUeDRG6hzYE +lZRdepo6xmdNABahH6CKPFJVCxXnUw5WX03hu8Q/TG//WAaIkySBFMQ1V35jnMD5 +wOkeJH4/6FFAJWgKdhMrGTfohBFiIENxAoIBABodRqyB5YaWa/w9nsw8amHXpAZX +WraeB+HhNC3RGdSWG9KF1M+yUMDRO7L8fzcizBhgjTJh1lm4j8HprJTAhRuH7rRS +qOD5MJnEEmhTVQeR9Z26YZSXKzn2nYtqlcyc0M64h/8jTNv+JB8BeHsZy8R95InL +uN/WDLHrK/lTDBVwnJ0WQANw6mZ+utufi6AoDwMBJQdKXtcMU08m7ODWla78cj77 +856Iki5hJmnuglAFuZ5SkOBNzE6tjY2XhAqwt6XH4mKjMGebcR5SIEK+iWmJdpBS +QoJksSJM60JRVkPCMNZayPp/yCGhSVxDOafRuGJkyGbaTtkD5YMa8NQJ2MI= +-----END RSA PRIVATE KEY----- diff --git a/deploy/site/secrets/certs/cluster-2/cert-chain.pem b/deploy/site/secrets/certs/cluster-2/cert-chain.pem new file mode 100644 index 0000000..a07fe5a --- /dev/null +++ b/deploy/site/secrets/certs/cluster-2/cert-chain.pem @@ -0,0 +1,62 @@ +-----BEGIN CERTIFICATE----- +MIIFcDCCA1igAwIBAgIUZwnGv3eUzB8cYeI6iLlCra8bAvgwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyOFoXDTI0MDMwNjIzNDUyOFowTTEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMR0wGwYDVQQDDBRFTUNPIEludGVybWVkaWF0ZSBDQTESMBAG +A1UEBwwJY2x1c3Rlci0yMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA +uHjubs3G+LEO9LnYarywet8PNj1gzMKuM9a1eJhjrYP1j5/P8klildRr1M5qh0U9 +mRplbQBB6s929qQHb3GaKYIXPpS/XAOKfKf+IyqPcFMNGgPtaLixzPx7p0q2alOZ +2eQNHT8uk/V8dxoARzJUioDX+0YoVc0eS7vc0DlTfMFeuwjX9m++7ktn2+1cdq1L +6rCYcdq5K6ZXeh0/cbA88Rwx3geiLxxNEdfiv/18TgkCQ9XE/HQza+goikVs1I9f +ILxYtG+HjdHIs+n0GmXYKe3kO5kwfFoAUG2lsrV8EXm3g1+yR2/aZAIEEoGWMScz +bNbqM/wqtLKDNZ9LLCYq2C9u4/SdK3dGs6SqP6lmToIIEThQztyMDTdOemvipgXC +1r+7xEbfpvBiVgyylJnuJlpbt3H+xfB/btGnR7+Ond3psnRnaS+E5XeuqXAEEI/B +kC0pSc72W3OMwsaGahdrgiJsUcDgdN9obaRMJMFesSj0A76JgSD9Ko4wsQoLqbfe +6v+fCdTEH6zwyamQU1lb2K3G0yOlfs3iVizZaIDkJWCr/g0Gnh3cy1LGCQJojxPy +QI3P8oQTsfxXjIzkpSolQriadmlPqiDLEytcx+LmW9z1WhmCkKri0ceVJRSN8bUn +kvWIPtUAybDK3uMAMpsrrAE80YCoXpxv0xeF0OFJZrsCAwEAAaNpMGcwHQYDVR0O +BBYEFDKrLUFl/InRytQRvH1Dqf7ik1/zMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYD +VR0PAQH/BAQDAgLkMCIGA1UdEQQbMBmCF2lzdGlvZC5pc3Rpby1zeXN0ZW0uc3Zj +MA0GCSqGSIb3DQEBCwUAA4ICAQB6liV0hMF6peU7dByN5O5qxw2V1XFik82Vh7EC +LX9oiYiV5h0psE5pzw0t467HOsPzEt8UyHMqbxEuOpAugRI6z3dJZlU09lMFESH9 +2vh4c7FJlFdzlDHRiKUaSksI+cX7EsEm6TxpZ4vfAQ+k4NqHTX2ed8fQGZp6jrLG +6BQeb1Co4yNSl7JhrSnxIH6hMJkViILAiEFKq9/T/jLLNr2QUJC42XdfdESMdlHt +EHb5myJz7rxufLV31QLOK2ZTNuWiH/mf/7dVeSK3kNi18EBWFLB/FmeOpHtM7vNp ++Yc8WJ/OHE0eqdrQPecDWmDl26qx86ZBg3aoEPfRgRcnWmTcY4E24HHxsIvYVEkC +F/FdaUg/ikxx5MTPKn5K1zh8y8l6fmHE0gXizPQ1V45Pa4XSyLLthsuWfVt1HQl+ +xr4X4pYgOgkO8MGhXDVd8NavWLD+zS79fTdgr1eX5AAimI36QmSnhrYG+GtqyKFL +b5Zr2J4PCMFkf1rkG1Q9dDXHczH/ld5GGEoEvjFR2OF204dyckjdo5UTQFm3oooU ++tatg65eDXTvM8wsqCywY8qVpfFl6Z2cemS8Pjs724KZl0CqfO+07dgiU/cPZfEJ +DcF1eZBDyAAXJJVEU8pB7/npyE8WsleESelHAMYbldwguhAhkvoFYvYAFh7VkLjt +U2gKbw== +-----END CERTIFICATE----- +-----BEGIN CERTIFICATE----- +MIIFKDCCAxCgAwIBAgIUC95kUgcVNhO2wLmzfpdu4+xN0oUwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyNVoXDTMyMDMwNDIzNDUyNVowLDEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENBMIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe +0QplSFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIG +bTr9pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoK +xKp7SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3 +poaMV85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCS +JlMhwxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5 +dj1s31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdpt +RoDYpJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENw +j3FaqSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8I +bWAECghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJ +Oo+npMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUC +AwEAAaNCMEAwHQYDVR0OBBYEFGuwgWa8wXsYJLz0v7eNpIXuZVXoMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgLkMA0GCSqGSIb3DQEBCwUAA4ICAQCtwouv +zpFKITD7fYibHg1at3qQvZQa2+4qCjfmWIrrpcaWIcc3tP79lLbtvUsw5y2U29Dg +4UJ4j/zKvfljc+INt3ltSeQSlN5DrblNlvuy4+q0cSlYX4diPfERsxH1mvoJlGt9 +Wzi+4jAq+TXPBg4uhdfLbkBEk7cdoavpBAKgx304oHzmhVKixw3Jw2k8y1LTqgD/ +2mRS+NFyh/jna9o3GfE4i5IpsTUnQVPhAKm/FmH8IGzpqlHw+s5upK3pktJBkthr +jjI4tMU9nymuLuI3lw7ucdPJSCW2luOgkljQv8WJGaLEnwUXRxXOGHdusQ1ARPsZ +injbMDtnnWuJsnZu4M3+B/19jmJstiqZHvp+DQTia5VSewIuia/VQ7zkKcJvGez3 +e3JsS9jvn1FqN7KEOuC8U17DyQHv2OiKHFTw3b2SvkBG5Pa9d7ATlXKIDkLj1BWa +MUO3KxTCHLkQOeVZO8ctwPnemOYbeWn1bfMt0EcGHXmMhz0bng1CFCc1Nznw0LnE +RcxU799r4RLbl2R2q0nihLml74Ko57YkGqQFJ+JBcLSugFIV0gveOezlf+vayp55 +X3CRxw7uwYlacSlQWrGuO3tnS3EdAAigACoA8ugYNDFFasXY/BNmwkhvEIiRryOT +tBfPBLZpBd38zYrMzk5OnJI+4daHH03MQ9MM7w== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/cluster-2/root-cert.pem b/deploy/site/secrets/certs/cluster-2/root-cert.pem new file mode 100644 index 0000000..dbbb4fe --- /dev/null +++ b/deploy/site/secrets/certs/cluster-2/root-cert.pem @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFKDCCAxCgAwIBAgIUC95kUgcVNhO2wLmzfpdu4+xN0oUwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyNVoXDTMyMDMwNDIzNDUyNVowLDEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENBMIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe +0QplSFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIG +bTr9pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoK +xKp7SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3 +poaMV85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCS +JlMhwxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5 +dj1s31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdpt +RoDYpJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENw +j3FaqSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8I +bWAECghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJ +Oo+npMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUC +AwEAAaNCMEAwHQYDVR0OBBYEFGuwgWa8wXsYJLz0v7eNpIXuZVXoMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgLkMA0GCSqGSIb3DQEBCwUAA4ICAQCtwouv +zpFKITD7fYibHg1at3qQvZQa2+4qCjfmWIrrpcaWIcc3tP79lLbtvUsw5y2U29Dg +4UJ4j/zKvfljc+INt3ltSeQSlN5DrblNlvuy4+q0cSlYX4diPfERsxH1mvoJlGt9 +Wzi+4jAq+TXPBg4uhdfLbkBEk7cdoavpBAKgx304oHzmhVKixw3Jw2k8y1LTqgD/ +2mRS+NFyh/jna9o3GfE4i5IpsTUnQVPhAKm/FmH8IGzpqlHw+s5upK3pktJBkthr +jjI4tMU9nymuLuI3lw7ucdPJSCW2luOgkljQv8WJGaLEnwUXRxXOGHdusQ1ARPsZ +injbMDtnnWuJsnZu4M3+B/19jmJstiqZHvp+DQTia5VSewIuia/VQ7zkKcJvGez3 +e3JsS9jvn1FqN7KEOuC8U17DyQHv2OiKHFTw3b2SvkBG5Pa9d7ATlXKIDkLj1BWa +MUO3KxTCHLkQOeVZO8ctwPnemOYbeWn1bfMt0EcGHXmMhz0bng1CFCc1Nznw0LnE +RcxU799r4RLbl2R2q0nihLml74Ko57YkGqQFJ+JBcLSugFIV0gveOezlf+vayp55 +X3CRxw7uwYlacSlQWrGuO3tnS3EdAAigACoA8ugYNDFFasXY/BNmwkhvEIiRryOT +tBfPBLZpBd38zYrMzk5OnJI+4daHH03MQ9MM7w== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/root-ca.conf b/deploy/site/secrets/certs/root-ca.conf new file mode 100644 index 0000000..53b69b5 --- /dev/null +++ b/deploy/site/secrets/certs/root-ca.conf @@ -0,0 +1,16 @@ +[ req ] +encrypt_key = no +prompt = no +utf8 = yes +default_md = sha256 +default_bits = 4096 +req_extensions = req_ext +x509_extensions = req_ext +distinguished_name = req_dn +[ req_ext ] +subjectKeyIdentifier = hash +basicConstraints = critical, CA:true +keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, keyCertSign +[ req_dn ] +O = project-emco.io +CN = Root CA diff --git a/deploy/site/secrets/certs/root-cert.csr b/deploy/site/secrets/certs/root-cert.csr new file mode 100644 index 0000000..89ce28f --- /dev/null +++ b/deploy/site/secrets/certs/root-cert.csr @@ -0,0 +1,28 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIEwjCCAqoCAQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQD +DAdSb290IENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4ahtOq/x +JaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe0QplSFE5ZpV7Rej/3Sfa2TqPkrl7 +doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIGbTr9pyXTSHagjWEX7dIJo85xOyO2 +Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoKxKp7SAlt/LMag3cMU3hjVjEdnXCn +dZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3poaMV85dmnvPUDkLT+jb6+m4m8UE ++f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCSJlMhwxO3eFR8A3tvqgKD7ID/i+iU +R9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5dj1s31zwSByqh0mKxE+c9wiVk5im +l2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdptRoDYpJSTOIuDRMHajYjLQZih0c+/ ++OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENwj3FaqSuDvb8KrWrXvUXbI1z7TPlp +srNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8IbWAECghBA4GT25vn2YT2prISwCbO +Y/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJOo+npMKlqCkuo+waxdzWbUH5y1pB +wXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUCAwEAAaBRME8GCSqGSIb3DQEJDjFC +MEAwHQYDVR0OBBYEFGuwgWa8wXsYJLz0v7eNpIXuZVXoMA8GA1UdEwEB/wQFMAMB +Af8wDgYDVR0PAQH/BAQDAgLkMA0GCSqGSIb3DQEBCwUAA4ICAQCTsYVR5rTLXPa0 +utWLHvunQWLrhTbzxEdaThGLiqWdejpuBF/UCmpM8xhFwk9EIppOW2MjapHvhZHT +iW/Gl41QUiKoIiD4ugM7WgMrOUZOBUxJaJWBvNADbka1amtXWNKbmmXs6Vmj39Qu ++btw1DGr8c9baYFivi9A+skd5GbLi4e0LQaNkipQyIDGsTtBcdm6vN3WNWt7uVam +QPob65UT2Q3+hPHAgPOphsjtqk6NKKXfE/cCqV4LCMkwtn6KxiEBk2dqjjBiICrr +z//XRog7z9b/HZIoBBLPIi2D1apF7Y/+D7NhAQyrdEAs+bPLGJh9yf7MVYsxtFMe +OdVVV9ZMIg9gSIX51nsIyOR3hh2h8bRJkJ1pBE5qNRtnzx+yiP/UMqRnt4GxRoKw +tVHcRZuCAJMuiUUWvm2FY2CWFD7RGeeccQq1RgoqCWHXF/ZQU+exRszYuJdqK7cx +QJwEMEdnfZOgPWyhX14ya6zSGpCpJOO+2Rr0Lis+VFPlqiUoT5x0EiLkFJ9r9bQ1 +eqhJzchO3kHdOCUqjtlVANF60K75Omw7IrBfIqoGQTXVkyuRh6E4PFOWr12a/B16 +A3waFnXlofaDkCpumzqj2syUOuex45oYZUEl8iQ6dY/v20tUUw9G8nd2PnHsmG41 +QSiv9SzYy0MjeZKuY3LLtytUW6KyFw== +-----END CERTIFICATE REQUEST----- diff --git a/deploy/site/secrets/certs/root-cert.pem b/deploy/site/secrets/certs/root-cert.pem new file mode 100644 index 0000000..dbbb4fe --- /dev/null +++ b/deploy/site/secrets/certs/root-cert.pem @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFKDCCAxCgAwIBAgIUC95kUgcVNhO2wLmzfpdu4+xN0oUwDQYJKoZIhvcNAQEL +BQAwLDEYMBYGA1UECgwPcHJvamVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENB +MB4XDTIyMDMwNzIzNDUyNVoXDTMyMDMwNDIzNDUyNVowLDEYMBYGA1UECgwPcHJv +amVjdC1lbWNvLmlvMRAwDgYDVQQDDAdSb290IENBMIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe +0QplSFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIG +bTr9pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoK +xKp7SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3 +poaMV85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCS +JlMhwxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5 +dj1s31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdpt +RoDYpJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENw +j3FaqSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8I +bWAECghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJ +Oo+npMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUC +AwEAAaNCMEAwHQYDVR0OBBYEFGuwgWa8wXsYJLz0v7eNpIXuZVXoMA8GA1UdEwEB +/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgLkMA0GCSqGSIb3DQEBCwUAA4ICAQCtwouv +zpFKITD7fYibHg1at3qQvZQa2+4qCjfmWIrrpcaWIcc3tP79lLbtvUsw5y2U29Dg +4UJ4j/zKvfljc+INt3ltSeQSlN5DrblNlvuy4+q0cSlYX4diPfERsxH1mvoJlGt9 +Wzi+4jAq+TXPBg4uhdfLbkBEk7cdoavpBAKgx304oHzmhVKixw3Jw2k8y1LTqgD/ +2mRS+NFyh/jna9o3GfE4i5IpsTUnQVPhAKm/FmH8IGzpqlHw+s5upK3pktJBkthr +jjI4tMU9nymuLuI3lw7ucdPJSCW2luOgkljQv8WJGaLEnwUXRxXOGHdusQ1ARPsZ +injbMDtnnWuJsnZu4M3+B/19jmJstiqZHvp+DQTia5VSewIuia/VQ7zkKcJvGez3 +e3JsS9jvn1FqN7KEOuC8U17DyQHv2OiKHFTw3b2SvkBG5Pa9d7ATlXKIDkLj1BWa +MUO3KxTCHLkQOeVZO8ctwPnemOYbeWn1bfMt0EcGHXmMhz0bng1CFCc1Nznw0LnE +RcxU799r4RLbl2R2q0nihLml74Ko57YkGqQFJ+JBcLSugFIV0gveOezlf+vayp55 +X3CRxw7uwYlacSlQWrGuO3tnS3EdAAigACoA8ugYNDFFasXY/BNmwkhvEIiRryOT +tBfPBLZpBd38zYrMzk5OnJI+4daHH03MQ9MM7w== +-----END CERTIFICATE----- diff --git a/deploy/site/secrets/certs/root-cert.srl b/deploy/site/secrets/certs/root-cert.srl new file mode 100644 index 0000000..0bfc3b4 --- /dev/null +++ b/deploy/site/secrets/certs/root-cert.srl @@ -0,0 +1 @@ +6709C6BF7794CC1F1C61E23A88B942ADAF1B02F8 diff --git a/deploy/site/secrets/certs/root-key.pem b/deploy/site/secrets/certs/root-key.pem new file mode 100644 index 0000000..1fe463a --- /dev/null +++ b/deploy/site/secrets/certs/root-key.pem @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKAIBAAKCAgEA4ahtOq/xJaFswt6RBXW/WDVJ0Gvoo5bVh9oKdQ91PVYe0Qpl +SFE5ZpV7Rej/3Sfa2TqPkrl7doFmYfBMGi8tLOrJzvfFt0Okg9xLC9IG5YIGbTr9 +pyXTSHagjWEX7dIJo85xOyO2Mt1S9LyG2DKVXLfL3WY3QuU0Rp92sAB2ZzoKxKp7 +SAlt/LMag3cMU3hjVjEdnXCndZlWlr0oa2eQyxPt7n7tgD9uFMUIqfM5XpQ3poaM +V85dmnvPUDkLT+jb6+m4m8UE+f3HglfNdJ78o18j53/SQi9/eBFFRzmxWiCSJlMh +wxO3eFR8A3tvqgKD7ID/i+iUR9fTVqQx1PPScGLSZZhrlMncHXNhBAjPTwl5dj1s +31zwSByqh0mKxE+c9wiVk5iml2UtS7ucYxy/k0YDKXP7hhWiwo0vn7fdQdptRoDY +pJSTOIuDRMHajYjLQZih0c+/+OytGHKKG7p6nwQZQbHzkvDRg068N8MpOENwj3Fa +qSuDvb8KrWrXvUXbI1z7TPlpsrNQxiblQRd4pSw5I3p6M6YK5pUN1/FblO8IbWAE +CghBA4GT25vn2YT2prISwCbOY/ferBf0Bs3BSaGsrop//IqW8TP9ZXhyJ9iJOo+n +pMKlqCkuo+waxdzWbUH5y1pBwXNoS7tzfXlvlrPoEMGuNnSgxaQf68ukQEUCAwEA +AQKCAgANR81N4+bsUQjGmzSrvpdJSLGUa5Vgc1MT0LhG1WcP+g6MPPFjBSy8pdWA +cssEKAFQQYsLlpD2k30EDJFeBSLCfvrrjFd9hqSbAg8EnhK71SAts4gUGzzJCfo+ +99ThsTfSBSdS1LI3YiEsuB+zf56cu1BrMkXUUQr3kRD6ILzXLGpP0ry4q51mft/z +lsEJ9I7cFr3ocyXX3PNkobNMRucVnJGnNJ8jqhf/bu0om2Dn+Q8hZM/DpyiJG/pC +fWj2Bf1TcAjmWf0F/XKNcD9uOqEhuEqzqCkmrgbxeQq7u2B9rmcLjF7zTSjCEy7N +Qal7tvQuqhTgFgsMA16zvawVHVhoGo34lremgrm9m/Ns4soMEiyWCOvPEY+HEgbX +4m3pZq2vS903A7oeu/t2pOMgh3AnHUtXFkvqolbXsaFiqHTpPOM85tNmB89uG381 +5t6vYxlGztey1RDszD5PlNPqrsQoNVgeMlV7vq2wUwMxpCNVSPPTN8ifrwmocpuE +ZWYE2z3YhAh2BlSL65xHSDhcQY3ME0YTSSTblhKNOUgyC5jJ6bTFRRHp/L3sqlyK +pVtnMp1/orGobITn/pSWbFjg+Oa10OILyB41gsP/WyaqcPJX1IMnsqoo8XKKEnHT ++XmnWpPhIfFtB77kVC+x6kveuxQHjeY+klLnfVSBzbil598foQKCAQEA8s8ZQgA2 +/lWLfCq4Ed5QqpJ5MqYk+dwRqImtXc6qEANPQXLoOvxk4rxA65789qws4dY5RpWa +L41xBQJ2NtSfS38KQ7csL1hIcTS8zNZ6fayfEpeO78Fd10fEZEAqi44kWS8+z+j7 +8PkXU6G7emT+yKEXV0Z4oKeOB9Ltj+S7KvsdGZCamwfZXfKBLkdnlLhVGx4l57p+ +oEe2Gdr22XMyWEVW84r5dtGfn7sQE4xmD8CFYbsg6K5iNkNK/8GYQ0t81nSxz3gx +sNj/691JngQG3ET1SM0LEa623HB2wCJPuvK7vR3q6CAbVzV+G3TIspQzrW/8uH2s +X1m+2TbTsOy1uQKCAQEA7erMD0B5cpHD1Qcd0j3c1nZoAF26GNWlylo0CXu7bco9 +8XKGInOKtlT9x7VbW9vgJ+D7fB22YqIo0GKBuVizbi1erpu9E9OZ0qtcNkmus7qe +AJjaBYLlV/XmZhEo0yQI8A2NG4qeKCvaLfoeWDuq5FX+3Vu1YH3WoDBQwLRV2aZ+ +zfA8LCqcMZSAzm1dqixTcnbhN60CBQXw1zrjfyDmo1PZLBQ9l3sccjGq80fVjkEQ +pDfSVoc/t1jOnTAnZ164k718OM68hAVaAhnDmmUM806tXIA6AflMKk1QmD/S1wFh +ni0ebTmawVUcefpB44vDiTyksOHVZpWaZACuZ4Ik7QKCAQA8T/MPMOx4GpmuOxJD +5fwVkpKmYRy4L9D3E1PMBGS724aZVEiZNk58/5QEsxZU04nGgybxAIIvI6waOXVR +w1jaMPFExsAj9oLwE9B99RyyEOnmfV0U8uwzaHFBEas/xQwEVzb7//xs7AK+VGM0 +UNf00AbzN98I0PX3vY4i+wb+8ydUTVYKAlYc/vrVmwkAqRUCymdR+0Iu4AE8xOYi +N3oe8QJbNn8m44UJ8TZaFLrZWNII56mSApcEsYx0oQsIVDzrLEtqpIl7Szuuw+Xg +aVGm7z4aWkxQlRx4/zqQGTXC0z6NCFxsUmVYMUJk4YpkyWlYwIN+9ECX4rwESpkk +zneJAoIBAHrD0mH4WfKVZqCQ2IF47HA5jvbJZlKUQ8VDgGB4WUGQvx/MgYxbZHMr +LfyUBz1CGstZG0tzJX6FwFuuyNN0ArpSbO3abNlDMbd0NtPId35ESG10ceOwJFmc +CDQYnKE+keIUjABvKab+4ckhq/DJcSf7e9SLEu9kX5Au/ixBoZ76e6oWUWZU4l3v +C/v4kQFTeAezcglBm64t35WfzG338yrKBGDrXNDCdO4z1MtOANMznbuvFjkR9v3L +tGmFxH9hcArEFspVWw8gl85HrxgHFoShz3DQtZ35HqUhWfoFzOymyNFO5MlllQY3 +vcbvLHqWzuIMycp/7ZbOkWkStOuySw0CggEBAL+5ATDhHJSucGVBGK+hfLclkCBv +Q35PrqcFS4k2NuTOeSECu9P4HcaWhlS1raK3bgKym9tFIUvvXQnAkF3wz33nC8s4 +NitBbeGSkZnkKR4nMqnbz7jw08eRe/cGzU9CILGw+3hfaxdZ9te7nZX/sS8ckQfF +tIHcya8frqYMfLyQjcBaIxRR76lRXsw3Nows4RZXgMYQ5C94E7vxMgvABrq0apLV +CNtWHfh4S2pCgh22k2j0RDRa/ykCwCXlmFab9pbFfrtXvcdL/FZuhURSLg1CaIWE +B5wvxxIQkq+hfEqbc6l+/P8Trk7Xx7uC+9DIbJhXhl2nUjd9inZ011h6lRw= +-----END RSA PRIVATE KEY----- diff --git a/deploy/site/vm-mc/.sops.yaml b/deploy/site/vm-mc/.sops.yaml new file mode 100644 index 0000000..1845115 --- /dev/null +++ b/deploy/site/vm-mc/.sops.yaml @@ -0,0 +1,4 @@ +creation_rules: + - path_regex: .*.yaml + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + pgp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 diff --git a/deploy/site/vm-mc/cluster-1/addons.yaml b/deploy/site/vm-mc/cluster-1/addons.yaml new file mode 100644 index 0000000..170028a --- /dev/null +++ b/deploy/site/vm-mc/cluster-1/addons.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1beta2 +kind: Kustomization +metadata: + name: addons + namespace: flux-system +spec: + interval: 5m + path: deploy/site/cluster-addons + prune: true + sourceRef: + kind: GitRepository + name: icn + wait: true + timeout: 10m diff --git a/deploy/site/vm-mc/cluster-1/emco-management.yaml b/deploy/site/vm-mc/cluster-1/emco-management.yaml new file mode 100644 index 0000000..28866df --- /dev/null +++ b/deploy/site/vm-mc/cluster-1/emco-management.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1beta2 +kind: Kustomization +metadata: + name: emco-management + namespace: flux-system +spec: + decryption: + provider: sops + secretRef: + name: icn-master-sops-gpg + interval: 5m + path: deploy/site/cluster-emco-management + prune: true + sourceRef: + kind: GitRepository + name: icn + wait: true + timeout: 10m diff --git a/deploy/site/vm-mc/cluster-1/gotk-sync.yaml b/deploy/site/vm-mc/cluster-1/gotk-sync.yaml new file mode 100644 index 0000000..52f12e9 --- /dev/null +++ b/deploy/site/vm-mc/cluster-1/gotk-sync.yaml @@ -0,0 +1,30 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta1 +kind: GitRepository +metadata: + name: icn + namespace: flux-system +spec: + gitImplementation: go-git + interval: 1m0s + ref: + branch: master + timeout: 20s + url: https://gerrit.akraino.org/r/icn +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1beta2 +kind: Kustomization +metadata: + name: cluster-icn-flux-sync + namespace: flux-system +spec: + interval: 10m0s + path: deploy/site/vm-mc/cluster-1 + prune: true + sourceRef: + kind: GitRepository + name: icn + decryption: + provider: sops + secretRef: + name: icn-master-sops-gpg diff --git a/deploy/site/vm-mc/cluster-1/istio-cacerts.yaml b/deploy/site/vm-mc/cluster-1/istio-cacerts.yaml new file mode 100644 index 0000000..a333342 --- /dev/null +++ b/deploy/site/vm-mc/cluster-1/istio-cacerts.yaml @@ -0,0 +1,42 @@ +apiVersion: v1 +data: + ca-cert.pem: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZjRENDQTFpZ0F3SUJBZ0lVWnduR3YzZVV6QjhjWWVJNmlMbENyYThiQXZjd0RRWUpLb1pJaHZjTkFRRUwKQlFBd0xERVlNQllHQTFVRUNnd1BjSEp2YW1WamRDMWxiV052TG1sdk1SQXdEZ1lEVlFRRERBZFNiMjkwSUVOQgpNQjRYRFRJeU1ETXdOekl6TkRVeU4xb1hEVEkwTURNd05qSXpORFV5TjFvd1RURVlNQllHQTFVRUNnd1BjSEp2CmFtVmpkQzFsYldOdkxtbHZNUjB3R3dZRFZRUUREQlJGVFVOUElFbHVkR1Z5YldWa2FXRjBaU0JEUVRFU01CQUcKQTFVRUJ3d0pZMngxYzNSbGNpMHhNSUlDSWpBTkJna3Foa2lHOXcwQkFRRUZBQU9DQWc4QU1JSUNDZ0tDQWdFQQp3ZENZQmIrZFJmZG55MHU2VEV4NnNYVmVtVTg4NHpxWGpvU05BQ2dFN0lobkd4dE9meFJ3eTJlVHdOUDY1NkJwCjE2aXV6VDFnaGJJLzBINldobzYxbGRBcVQ0VkJSZndjZXkwQnZPNC9oQU1ieVpOcERub2VUYkdSRzY2bXVRNWsKZ2dVNkU3UW0vYm9aQ1J6dktZdDJNcURvRkRoMWtzUkRoMHJ3K29xZUhQUWVGa0ZsVFpqOTZmVi9uTVFMbllpRQpIV0hMQUl0NTlZV1g4L3YxT3lCZDlIYnVPUTdqNW1sejZwdUg3NHVkQWhkN2NIUGozdzBVSHBaaTQ4ZU1aaWM5CnREdHY2TzNubnVMQzZLMnp0UXVvZVBGbHQ0ZmVyYnNJOWtZaG5GMnhxUWZUaFhLRjloKzVVNW1UZjZjYmJ3ZVIKMXY5OGtSY3M3RnRHVDZSdjRkZWF2dDY3aThnV0sxVFhNS3NrVXRSeHY0SWpsUi9VM0Zvdm5xRGtrUkV0L3IvdwptbmNaZzk2bGEzYjFHNFJoc1FZMU1JcThiZklZTXNYNjNrajZMWEFxemNGaFJ5YjZYVGlWa3ZOd2Jrb3N5TGhHCkh4d1BraUFtWWhxU0xWd2crQWdEMCt2WUF0SUhvbFUvOUlTUEplR0JoM1NjeDJZSXhxazFMYmE5WlI1M2U0THMKVzBMbkt0L1llQU55U3VoQTBwTExJdnRXNnk3MUxLTWZibTZIb0hwY2c0bHA5V0ZjRHFLdGVaVTYzK2FwUHJoWApiclhwR3ZuRmMxL3VZeS9BUzhtZmtLbzk1Y1dsWlBiajNxTk80cDVJWktwTDFuU016VTJ3dWl6NXdJQ0w0azRIClVUMHZkdXlrMmNDSjlSbTdtcjlUNFZpdkRWVnFJckM4cm5yTVY1SHFMVXNDQXdFQUFhTnBNR2N3SFFZRFZSME8KQkJZRUZPSFozcnVOTGFpTkFwK25mQnd2bzBDOWNIcGFNQklHQTFVZEV3RUIvd1FJTUFZQkFmOENBUUF3RGdZRApWUjBQQVFIL0JBUURBZ0xrTUNJR0ExVWRFUVFiTUJtQ0YybHpkR2x2WkM1cGMzUnBieTF6ZVhOMFpXMHVjM1pqCk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQ0FRQ0UvWFVQeXpUTStzRTFESERiYlFIWkFlRHVOem5JaHNsc1B6UHUKaHlOR3VMQUJoT29BL2IzUHFiS3BpZHZsaC9jRGx3amlheTlkSmFmRUhlcE9HelkwcFRLZVpiNDZzZWNBdzdzWgo1ckZaQ09YZVJ2ZnBYZDR3enRRQWREeEVsUlZTMzViUXNBbndDbnkzOHhMOThLc3JRdWc0MytmOWlpSDVleWhwCmxQVWsvNUl3THRMWGRnWFA0WjNzdjFiMFlRQUF5N3ZlT2lVRjU5b2wvZVFIbndEWkwwcTNFTkRCbjhGaVFmRjMKQmpFWmhiamVKSlRXS3ozeEQ4VzcveTBWS0UrOXl6TWtNbmNwb1hJcGprQ0Q4dWNyYzIyZllnbHFXeG1EZmNvbQo1aG83bjRjS0s3QUtOOURuMVJBR1lDYWVTVkhxcUg1Y1pBeG1QeWN4MjJJMHhXWTY5aUI3ZmJoM296aHFOQitICklrZUdYVHY4QTZQQWVieUtjU2cvYlR6a0ZXb3dFYmd0ZGFkRnRhNTBiVXFmdmlzMDQyVEgwSzJ4bXlRc0xPVUoKdmtqVUkwUXJaS0FlR1RsNmt5U1JUSWxUS0kvcTI0dVlwd05SZTE4ZVFMdjZlQm5CQzY3L1p4b0NGeWgvcGw0SApuRkhQUFR2RTB5N1Y5OVBIRWRmTEYyVEU3am0rWExRWHRmMDZiOEphT3NNak9FVmJiNFBpMG85MDRveUl2bjZsCncwZFhNS0lRMXdNb1N6MFJRckFDSGpJMVVOQlNUVEYrR2dCVGdtYWQ5YUhZVGxYSW1uekZ1NGFQRTVWeXFkdHUKenYrNlF3VmI3UzE3QWNQdldmL3FMOTI3ZVRKY2hqejY1SGVteGNmSXBsQnlwdFN3VzJCdkNueFhCRWJ4bWN6QQpDWjNReUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== + ca-key.pem: ENC[AES256_GCM,data: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,iv:e90ctNZe0qvVTYUpJ75uq0RUCRd4KtaIdmKF9hXPP94=,tag:uZzqxd5XO72j12/S9GtMlg==,type:str] + cert-chain.pem: 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 + root-cert.pem: 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 +kind: Secret +metadata: + creationTimestamp: null + name: cacerts + namespace: istio-system +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:30:59Z" + mac: ENC[AES256_GCM,data:/XDh1yqCtVs5W0bHpV0R35/vp8Pwa7Yd9HLcs0zvUv+h1qXZMls8auHbg6Gd/lhj+FvtpuYGj2K9PBSNvSHaiIG2p7h2cqdabd75k1QHP3LcuULOiyO2kOEp4QFtw/ETIrBnWOIFF2tn6Ib5Joo5xAAhSZH9MOJcxQg1JAevRZA=,iv:r4Ps265+248ENH/z5ECzKvyv/U4RS29/qG+rP1xFx0k=,tag:ghOfalCaTURSP/4g7abT7A==,type:str] + pgp: + - created_at: "2022-03-08T18:30:58Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ//frnjQe9aysF4vX7G5nLqi9VV+wIjB5q1TIt8kr8SoAkE + tTcnFQaLyLgi/etY1WtZBYeT8s8nStZ4yv3LjO9jW4bGObsH/Qru7hmgh8qYime1 + CkaaAWxM2kjdGey9dHPxW9QCoiPz5WYPuEefx0csT4pxsBd2Cvel3LkCQTHoTmGe + Iyh9gMEhd18tWpAN+JihecStnnVw3hSuhqjhZimFBUmeh30NWBWqZHX2GJuRTRSJ + +rnzq327ekea4uVayS6dKfXUl2LCY/piXhLo/iSf+QA0yyfb1rUFarkEhoE3PEK0 + gMWHHBSrc8rQUBt9mb+I+RMiE2OHmNeEyKTY4hWFRiudAJgO4UiZ9wexQ1KSE0m9 + PKoIgPIzt1C2T1jmWj4pqL0fxqgQtxXf/SkH4c/E4z8aaGI2rc0bqYlUWVlssWyD + 8wrh+GHkfChvXMAJSBPKB6PlNo9UyJaLM7eoSQSEtpm86zi2SbAgHzq8nUbruNrF + 0p+9TaSKiEucZh0zp8pZkrq5cZ1Cufog2UF6MEaMbd+WDllC+6jfBasB01uZLQSz + bfiHwQO7JEfSLXANceM8vqlEXwEcQZ3/P2M/zmUMjEhp6ifzZt5dwvOVQmhP/PSo + 6pVqZg6QrhSGLzznYWqRo13+uNyjd66KI1LQMBCVbyWEFGa1e2dA5UPtuzzopoXS + XgH7lS0JmDOWqk0OS3oIqum0KeEQHCr+nReAf7CcKYVo/om+iGDtrHAduPk0d82Y + NuKRgPGhAWSN4jZnS65PMZ02dAfK72f9r9JBc76HLfTAEzc5wyBAc3KyGzyp1Tk= + =UfhO + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/cluster-1/istio-namespace.yaml b/deploy/site/vm-mc/cluster-1/istio-namespace.yaml new file mode 100644 index 0000000..60de14f --- /dev/null +++ b/deploy/site/vm-mc/cluster-1/istio-namespace.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: istio-system diff --git a/deploy/site/vm-mc/cluster-1/istio.yaml b/deploy/site/vm-mc/cluster-1/istio.yaml new file mode 100644 index 0000000..5eb5f09 --- /dev/null +++ b/deploy/site/vm-mc/cluster-1/istio.yaml @@ -0,0 +1,24 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: istio + namespace: istio-system +spec: + interval: 5m + chart: + spec: + chart: deploy/istio + sourceRef: + kind: GitRepository + name: icn + namespace: flux-system + interval: 1m + install: + remediation: + retries: -1 + upgrade: + remediation: + retries: -1 + dependsOn: + - name: istio-operator diff --git a/deploy/site/vm-mc/cluster-2/addons.yaml b/deploy/site/vm-mc/cluster-2/addons.yaml new file mode 100644 index 0000000..170028a --- /dev/null +++ b/deploy/site/vm-mc/cluster-2/addons.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1beta2 +kind: Kustomization +metadata: + name: addons + namespace: flux-system +spec: + interval: 5m + path: deploy/site/cluster-addons + prune: true + sourceRef: + kind: GitRepository + name: icn + wait: true + timeout: 10m diff --git a/deploy/site/vm-mc/cluster-2/emco-compute.yaml b/deploy/site/vm-mc/cluster-2/emco-compute.yaml new file mode 100644 index 0000000..4b97d14 --- /dev/null +++ b/deploy/site/vm-mc/cluster-2/emco-compute.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1beta2 +kind: Kustomization +metadata: + name: emco-compute + namespace: flux-system +spec: + interval: 5m + path: deploy/site/cluster-emco-compute + prune: true + sourceRef: + kind: GitRepository + name: icn + wait: true + timeout: 10m diff --git a/deploy/site/vm-mc/cluster-2/gotk-sync.yaml b/deploy/site/vm-mc/cluster-2/gotk-sync.yaml new file mode 100644 index 0000000..c872df9 --- /dev/null +++ b/deploy/site/vm-mc/cluster-2/gotk-sync.yaml @@ -0,0 +1,30 @@ +--- +apiVersion: source.toolkit.fluxcd.io/v1beta1 +kind: GitRepository +metadata: + name: icn + namespace: flux-system +spec: + gitImplementation: go-git + interval: 1m0s + ref: + branch: master + timeout: 20s + url: https://gerrit.akraino.org/r/icn +--- +apiVersion: kustomize.toolkit.fluxcd.io/v1beta2 +kind: Kustomization +metadata: + name: cluster-icn-flux-sync + namespace: flux-system +spec: + interval: 10m0s + path: deploy/site/vm-mc/cluster-2 + prune: true + sourceRef: + kind: GitRepository + name: icn + decryption: + provider: sops + secretRef: + name: icn-master-sops-gpg diff --git a/deploy/site/vm-mc/cluster-2/istio-cacerts.yaml b/deploy/site/vm-mc/cluster-2/istio-cacerts.yaml new file mode 100644 index 0000000..743826b --- /dev/null +++ b/deploy/site/vm-mc/cluster-2/istio-cacerts.yaml @@ -0,0 +1,42 @@ +apiVersion: v1 +data: + ca-cert.pem: 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 + ca-key.pem: ENC[AES256_GCM,data:cXtd+iqwMIAg4A02e9waRjfOKdk86nw8f6aTcinnBU56xrJNjt8JHMiypAFVR4a1l3nqsyEWemIa4WHqHtwla3DrFNur3W7Z3CiblcbM7qwfqvZH5n3KaLzJ6L+oO8JHR/8DTNs99PfUDTJoXDXasA0WRP/yrWyN66LaG31Da6fdHG1M2ybdDzn7Yj+CHGXpNXUzaYKeVloUx031HHZ7vfp8btutS3u3Bo9Vnj5JrFOY9MypeiiLPb5rJBnE7QhGe47FiG55SkqRvmKKTjQhZ7Dj5alAdVpe8s5jwsJFH45SQ3sIYQLVQtt5GaXdezbrUR7UO5mFPlScfJ4nRery0M3wU+0ovqMRQCrnjZhM+1H1Nxs4j1bcIJxh4Qp2DFHz3R9o6r9NC4nlIFYF5hVMndwuZ9mg0iPI93L8swweTXRHao0tZawBj8SitzJtVM86Bq88l5ZTpFRPQl3dVg+5f6P3Q7B+54J+PN9yaj5e9L+6dgybtP+UWoe6MGYJ02PhI5cu1FxZCB8rQbg6ERBZojvHC2/fOqoQ7P9yJ+F5RH1rjihWM0rE9XQI6Hz63YEmhDnl4ghftUjU5u8ixtqn4hM+L7qsMfOPCZ2Ukhl0vbNFRWzHdUiRXoDrmWganu1AD/mpXBgbwYSfEGBeo8uzmV+VeKJa8ilKdGO7S8ctMNET+UjZhwBYGSgUe1OnDohpINJRGp1RYvyA4hwh9HNUqAqvoA2APAr9aFKScJWySzvjMnj6RrmgIHjUTuij4FopSkQobVRjUTuCwPDKD6uUbJ8KoJZu9bvbvzLy9DLT0bVfLtMVuNI/4aImViH3vo8oHUVaMeQo/rRBInExaz0n+bSq/Sq7rxv3u69472HHdICiYOBq90pVGOTZFKwznwkH/Md8sVJhi36y5BrSQLFFWYb45ijjZVt1qpnsKmXqCxQt7wMC7PQqMSBW9vU88WfDFmwrEu0VeO5RwA9zwQJGLM0YyzBd4+zdqeYKDLZUa5Ye/he/YvZezDKpadSsF4uG+PpcZM1Zl4GG8fv09vuUfhGjzweoPLg57uNAnRuyfA9lq9HU7lwWWUDE3MWzQEGaI+n65Y0YdiblzHjwAT9yFtrMcpeKsWupkTU6dfRrM0Blb2omazGP5QULRqglr+RNiLU4juec5B6/PRLnIeEmQHfsGWgkpaKScN04E1IcesdreqLiG4faqmXdjo0TjZQgzk1yIswbOuZNeDNZGRQUfo/7Hemi0E1inruKacAbGF9d0j2D0L7YCR65t2Ao155Fwxla0zz/JmEsuf4UI4MR4ja+mVELckCpjpIJx62gtGWWeYt4fQ60JWKCr+uTV8HxQHpmOGVuqVlaeWpHftvMdAh38cge/X3Yl5Dl+d4J9q2LDf7LwgXn3gw7wryXm7LyGPLCD6eynU0eBM9b3EHOrxTbuZnT4pUHZ8kAA57yLp+DPX+KpxFlQK6LgeCOG74Mh4mY8oXRtx2o1/e6WxbpnlibY/xUBpnUrxxsmdv9Hej+iyT4KoX8gEuEQhA1/vv5vgPBV5L8FYHVvzW1vLv+8Rl2bvoD4UIYM7cX2czsfb/RSXkyxGhjtUEK7ZDvhJbf3Mhdbv9Xd9Qn0HAusOIiG9WjLiB689t6ZnGvEMaWXPoHkr71JOFqM2yjU9/CeFaXh961Bn8fBP/kdWtac+LOpLENJqlKgWia1IgHAeYZxwuf06YR8Z4FD7djKf75aqufb6HTXaAREY1zZ949QaZqPGDGaQ6k3VIDvMewOfgHUsK3gKWUvr6A9PXLExDnrn1sTCBRnMDW8mKyf1cf0rDoyQx54vVh5mZ4L0Cv+y+yRqPX+DEqK6WyGq/8P/zp2UAL0ERAMtqHv5p8fMVBWOjIwjU0YLG2zHav41qA3NLOa6Jab3o2SMQXtF1ubCFQ7aNi655DMAwiYgbv7TO2AleViI3vwmH02zexKzRG8H69s1HOw30LjKeRF2lpsVk83RRsFtnjnTVWeOHtvWJjR3VadphmT8M6x/R7ezh1XIF/IiIOTMOdBL3GnS48JwxgLh8ga/11e1kL3ZGT0NlvJzyqkLLGMeKZLlEy+I4qYawALwkkS26/xwbf3i9BB0v4VQnyeCiZHeHYNCoodKv7sqnQ8kwmrYs0+36eKwltuYAne+g5LXJ6smTQ481EsTnYEzU+smBDs2coTAYZ2oUjmDhbwUjyEuDg8yYSai+kMNgEJ/ZbDvNOM6nCuTWexYJl6ywOn2Bj3plB5OU/b7Qvv9rv8c+Fs03TqNCLw1xjyDUP6mxKEMh+SLXhKTsK3T4cHlWMvZWvZDaDvldQkMZaOnpSiv/xT1BCDNOnPsKlRuVijfRByHqGZLlHIcqDNbaCDZK6L6WfpDk3J91Zxl8KcokVNMrvnjA0jHCm5Hf7HmvCk45TLNvTpLpFOt2BFQYtMFxnCYJ+OOk0Vw5j8qddvjCTdBEjUNpoi/D3W79OnaXSGTGyHw418ST3bf/Y3/Qd5dmHb9XXof11jk95MOcA8RiwS+mZeyIfg5vvO3+5fH9MmNGMosj0q4/Zwl875GZuHCo0kxyJfa+QBZ8uc+Gj9QBgV7Zdur7fmcBL1K2U3qgJrnxfUMvfmN6GLVsXQdSV433Knq0tVuwfBBDHs9PNOhs0/goZH/B4JsCdjlddVvlBrCzMoBmPNDOGaTf62iVg16oyepHtKEE1sWgYYQumYjxdzlP/OJGAXzoDW7ZqEKox4PGmk/Wh6gAOg+ON4TUpO9wqU4owuvfwg50k+4GdYPALRMS5/G7xi+kP3IEuzwldzzJ1hkmRcafO7fvZ8wZJ/2c/NUY7jXOKUBGN1kfvdgK+e+Ati6T8WeVyAJqlYeUwsLQO7RbiZoBQJrN8pALU1pEDONkaxozM73FY85jo1/Dk3mlRt1y1a5q6A9G+WShYBErDDstqCzhAkY0txw+9X+i80QhsyrR15lLyOuwx5at/1DupwziSiG6BdlPp5orVOtEQH48tzXAyfn0K3LDUPRQAAwfxVCCNN1xd6+JfddrBpqu+qEwzmw0mCYktEhOYmbaak1NOoQU/ZR0p9+1ZRGC9zEY6xgc3Sb6OvjXMJnMjZRdMlG4DGkm7MY2FdQdv5HKjwbCX8p9bTwWdtsynIUz0PXW73PPKRNCXrFJg4EI65suH4Puvlem38V9uDPT7Uy7Nj3uyND4+WJvpNC5ei9CHGAoy7SlcLpYzoJqmFHAg/1fhEZYmgTLSX7z8FidBqh4nwK4zpy3zQw2GpubbRXoVpfqlx75YTKal4eyQjDX060TswnFvDXXLqy1VWRfgUwejE28AbKCUANKqZc2EIXhrzPo5+CebbTX6SxtJ9Ux/N+g/eGJDUnbB1Iz7vkswzbYAcotbAwZp1dmvGpx/FppzT1UVlQ5UqPZPcd4sLNPVGj02EWUs0YkSl6ejGAGNV1RQX6aBckD+5LolEhVdbTosTfprCSQ3ZHwFzV4roZdEQJgIsX92fCqVL5vFL3Ewhj700N0m03a6fsfsvzM75DlsA6gja51HmRC4A0smT955zkploQH1mJYDZzCcfv2RKBznNvQUYmAADd9TyS135BB5x6MolVEAQUaYU99Jny8kd1s9NmkLL0vjbDU9lFBtmukkli3MdgLSB+efyT/cGSivNak9s/AAKrZgBlDqXtVlwuE2uynN/C2stH1A6ri5w0bzITmGCkp/gNSUusPaJfYQodYJWa+XjkYnVr+S3wky5BZ/N37i4mGjp4AuvKuFAGraKYKt8V0+CqHx10/iaZ7tRZx9wScwXICl4WahcgSqgDIVXeDh2VAl9P8wVxuYKlfK7tdSOmIreW7doHOCy0i4QlUngvAwoomERx5anwJqSbDo9HxdazM+9QmxnG9lFlnUFdHC1B40SQ4PyIud6kUAFDlXAoozDOksaEulYqGAfyRSDP8owm1Yo2GiTFgAOQYaN9XuOXd8Gtbczue5b4rQrel1qH95smjKsFh7YLcuGeM9M3puHNZEOVeuE5Yupr7FCaGxMrzjtke1MeRwDw3iMII9NdK21s2cmDPqSvlegAZXOg/fXg4V20V7BiKO+lqp1EjlmsNz7V3jkYpH5xf1iGNYjKlPbGI2CsJBC5zCBYJzrA9Kk6FL6U3vzsU2ZGowc3kUNO+87kMpgp/cr4xRjePkakbWXXqNe4eu4b66zr19p03bhQzsv40sRG9oS0BRo1JzSBs41WRxSUyLmJj7n4TfFyPoFb05IMAzW1WCVLgWHfcaCLzFpE9wA8utLR3Bj9xJrX97glu9B2TK5PDn0Wfrzmn3uf7+RRsnJFEG7K7/hyqinbEA0Kv76APv4eT26fKKoUsaRBjxK2NeM2uwhiVh0gsAwNAnPB8tEFDmQpo4Q3x13jJLhw3gF1F89oNUfyeJrtumcdK3F3kr9touf+GCQsQV/b1SVyHmYfPa1V0KRqTY5MW4hNQE0vYFuZcPC7CbMCOSvvr38Ucd4sWlxPWCpDubVdcn+Jqu9KWP9hXqKII15c+b7EP0SuVZixtS3pCEEhcz21FNSFabHLLjWYTcgbX+IpvoH5MWu/BhjPnKuVH4Tql10t0dExvL7URlM8IlkcWcIn493jps5JcGHr07Kt8ny+VSF69NHUENyNUF+U3hRNtoI23OdmbBB+fh+XJihQlmgpNDeovZ5tfhKKyNdHm/3cva0Uf44z242fSWvRhVonJqol34BEy7DcBleM30j088v50PEIJnHjb/Nd0xKMPfZOURpn5MJcckDOvfZdc3m1Xk+y22f5Ru51ovtdNq1WSWtDsLbZxsrjmXBNwQxNxmwtT2vzZOnk2J1eYl8EIPzDjrZtPOAh1RAkkBqX0Rc8xLrdoqeRM2wsvuGcolv4MosrtRHI91OWtd1xjOkDESMNbvNlSnczU725c25lqzkpYN2i+5wNQtkaKDB3ZfWZUQZ9iSVOBdHRmar8/5NaZLppi5K2bk82auGVc6y6lJJ1i+akJX8uUuKPTLx5eV3fSkjbdtxh984s8LjDfrsyF7mbz7li5w4R0bMDLpJ7fwy56P4QYSN57sArQuPHt5mpmtXR7i6wPH3PVyUTLexF/iKjulIowqnvyLnFJRjw1u8jKAOIdX7Q6lpoa5rdlKY1JuRvdROZJG2/NAPH3smY8toJXs8pwpfpTg72Um5sjzXHf1zlqiD3Os1UmWW1KxFjvH+rMQXGPYird3fxrTj6K3QgMjbj7Tc6FKd51hYEqKScgUEwxoaZ2j0mFCcjEiYJYq+zrniVXE6+buryIYHOE5VTzglR4MpKRX1N92HVwqJXkyDe7RdaceuSlaArhoDFteFbR4rH9d1n2u3xB0LB8U0AgosBq7DlDnDbeyoxnMRxeGNjd0ubUZ1lj0xQ9TMeNOiop/W9sPw5K9PExyw8tG7Hz21YkbCZ9n6D25vADlDL2q9mYwrNvVhPfl7qzT83lIJKP/GDSSdQmrbeagXa5eUnJjgV8q8eXl1OiGjmq/6FddGG8eEnSi0LkesS4doMkWMfo/qkTka6EQlOIB27Z+OsttHeBITOsPU6NXGdapXdZJW7n5xVIrUjVJURUFSiY2VEnVo165d7dY9FoCSwF7mnTZxZ5a7Oa19VBtRUmasx6odx5zJNZE7ffPUyIezFF8nhoxEZtnL6fcwvRKDdh5Fe1kA9TmJnNsL/QcK0V2kOL6lhHZnlsQ0F6neB+S9CJNr/GgOnDeE+QRQ07qRRfawaHKQHcdkU3L+xvp2xAb/61pTJVggKNMSA/BhBWCvA==,iv:Mc0y17c8X6g6lTkkWclSmKQoVTQkkQur3zBAFs6wmsM=,tag:yc1FQ7jMOXLkGlUJCZxkhA==,type:str] + cert-chain.pem: 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 + root-cert.pem: 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 +kind: Secret +metadata: + creationTimestamp: null + name: cacerts + namespace: istio-system +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:00Z" + mac: ENC[AES256_GCM,data:z+d/wy8bSwBYsUN8x8MBS7t7O7dYYC6MoI258rvbcLO528CwgDFc4OtpOwZyWk69ppV3ro/je18WbJmWXGZhdO2TjYiGIYbE6g+3M+tmId7RhQ4xFhTFLo78PcUURltjcxyiifnIdjNnX4y7hluZrfy65FiWuorzvXAIUiLvPc0=,iv:35QWKkiop4dHWD1F5UxDoFOW0MaK+JODY19IqYjk7/U=,tag:1D2Z+rXCzOcd4RPjgu0lIQ==,type:str] + pgp: + - created_at: "2022-03-08T18:30:59Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ/+IF8/FLVnvDzaHxPeRBajl26k4GBoe5RDpbnQuoqJJyIR + qgoYpgSmg2kXDF+X8pK2uqoeH852Lm9FzSBuBIGw/GlkArL7bkG/hpxE0MFTU2Pi + 2CG1Wf7ZTCnv046X/8xyfQdwMTPRQYbFUClpUJQ43sTuFidID+qj+DJoXfFItek0 + smlolrkjL0m5vN0sTVoCpIsPZZpEoZBVeSqSyEqGAZesv0iayOOGAGXDav80MHrS + lnXJbn8ejhHE+h59YjUStICmv47NvNmX6U/SSS9xq6vtc3ZyZ5o5RyTeug8vLRnz + ooEk15/RK/pkMwDvuNiyeyUYkHEw6QTRWRfrS2Rifh6w1FB6a+YzAegKUbh5mbef + QGBzU0hi6E1tcFD46MavAGkHISvB2BuD4zIoVpQ2kJjbkjhdvHBeQO+PAR6YS8vD + lHx2PtdcetQJ+TnSNFjWrvPy3esqDXC58YBd4lzG93DY7H3bKGRWOlnrt2YfN4Rs + Pz9bkzo+m01BG5dwUl8DATsSFxhf4EqIyY4jYdw432MQM2MmYXv2pMIKecmpxkWD + tVPoSut9kZSmwo7yBc6bXDafZ/MMjLZngs02/grlh70Qz05GMm4jd2mJQZQo2heP + vUjruuKi5oJge2wEFWstP5cduc9VeiuuQmzfUS5cGBalZC7sN6gFHJGTTwcb1IzS + XgGFZRhs1U3sDhm3aYBuehNiAQH5PA48t30FlLsVUG40asD5aZLUW7KYOa2JtUpb + fVlXVKOQULGcEoshRVgpekdEeWtKz5hKF1xD0YlZTKcDlLpK3RoXOEvHw08JD7w= + =V84I + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/cluster-2/istio-namespace.yaml b/deploy/site/vm-mc/cluster-2/istio-namespace.yaml new file mode 100644 index 0000000..60de14f --- /dev/null +++ b/deploy/site/vm-mc/cluster-2/istio-namespace.yaml @@ -0,0 +1,5 @@ +--- +apiVersion: v1 +kind: Namespace +metadata: + name: istio-system diff --git a/deploy/site/vm-mc/cluster-2/istio.yaml b/deploy/site/vm-mc/cluster-2/istio.yaml new file mode 100644 index 0000000..5eb5f09 --- /dev/null +++ b/deploy/site/vm-mc/cluster-2/istio.yaml @@ -0,0 +1,24 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: istio + namespace: istio-system +spec: + interval: 5m + chart: + spec: + chart: deploy/istio + sourceRef: + kind: GitRepository + name: icn + namespace: flux-system + interval: 1m + install: + remediation: + retries: -1 + upgrade: + remediation: + retries: -1 + dependsOn: + - name: istio-operator diff --git a/deploy/site/vm-mc/deployment/cluster-1.yaml b/deploy/site/vm-mc/deployment/cluster-1.yaml new file mode 100644 index 0000000..2f7b0bb0 --- /dev/null +++ b/deploy/site/vm-mc/deployment/cluster-1.yaml @@ -0,0 +1,65 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: cluster-1 +spec: + interval: 5m + chart: + spec: + chart: deploy/cluster + sourceRef: + kind: GitRepository + name: icn + interval: 1m + values: + clusterName: cluster-1 + clusterLabels: + site: vm-multi-cluster + controlPlaneEndpoint: 192.168.151.254 + keepalived: + interface: ens6 + routerId: 3 + networks: + baremetal: + interface: ens6 + provisioning: + interface: ens5 + userData: + hashedPassword: ENC[AES256_GCM,data:T9ax16d7VK1FudY7jkBSahk/MYAkmWDfzLadmRckfIF9Fs+6C7dGM5hyG8Lkz1sWcJXpQzuHd8yxQ8/VoSFCXAOv11ctrJsfNiVRNOpbEcQkGXwVwkVg/3Bm9TkP9fjjVjN0jm9yI+jP3qkTRF9tsw==,iv:w3FmcJehhEgvHjDXKlsJWa52wTnRN+M/f1xZAwdlg2s=,tag:mgyHF0SmRU36oUsPrH9MWw==,type:str] + sshAuthorizedKey: ssh-rsa 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 root@jump + flux: + url: https://gerrit.akraino.org/r/icn + branch: master + path: ./deploy/site/vm-mc/cluster-1 + decryptionSecret: ENC[AES256_GCM,data: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,iv:r/Hjn3wG10eRijFBKkMQf77eEl3/KL8k2Aj03j4nxK4=,tag:s4hzLn6N2lSRcZXD6kMD1A==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:01Z" + mac: ENC[AES256_GCM,data:Cx3hRalfmYv+Njj6eo2xtkzbW2tTCkYWtzwI1aolS63ky8gntm59aSVFYnQn3Pglq+4FbOzz0nW/hY0qUNzBWHER42Nh2X7FoBUdFn/DUolmZnYVskU06+uI4ajzQkWGJi5CTQh/mvJvD7Lg84M4HX0Zoo6z9sbrjvR5Mx2MK6Y=,iv:5HLXiH2He1KsOeETE1UpVDyOWGiAnY48zpkgRdkvFeA=,tag:mI1Hz6LGVu7UnyjM0pkXQQ==,type:str] + pgp: + - created_at: "2022-03-08T18:31:00Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ/9Gok3okQbHl4sqbNKB8tSYiYw1gKjz1W8S28K55LinrC6 + 4jyMoK/Arjc5ECUO0ysnMpDpabzYlbaqsePz/pzKjqPmo/Y+jzW7SX4LnUppgmEB + 0jh27XovdAKMGCboW3jAiiTPvWTDcWBiZcKj/ui9ICSUa+AM5LOkXX6aRX0dfg5o + qDBPxaNFJzYMbPPOC9X7ZdrPHjl01Mth6x+mjqMtGi2M79QlinQzDCbQIwIKTNMd + W3urVbXsnWPjGud5cGZDu3GwHTFA3heWUgFp7kp6TZ+nRhR+Dk4Fp7uJtaS1m8lz + JlAavtjEwbIkxb42JKiJPG5ntfyJqUNlMyYsOcGcl4jlOhBIT3y4plRwZHSkpwbq + 1To1SSrVCraYkVQSoEKdM1UamkffVB9eqRDeLaQejUbaZF8Uw/THk5mE7U+ra7RH + mPsz6LCBFPvR5CklVhXaMWqeWxiejJNkf0sbMuYjF9fVIQKSUFk2I9hY7TOlhI+6 + TMIeqgOlV3DGDDnaC0dpdh+tbEXI709lkRHZIS4DTQSLvbH6v90HxsiobIMWpFuq + PLwxSgyAT9PX+kuJ3awFSbmpGVLnv2xvdXvoHopyA/jLJCfCRUSCRXZRctcjeHZy + Vq+UIOJ3M9RZZivfFDvUjU1MULA9WFseX1uUk985HzcA7T8IUsSNrf5MzePnm5HS + XgG3N7+5l3ZXk2DBNiTUEjLM46Gnwgh3CMwfFv5VBBmRcTI3YtWs2eA6kNHw1xmi + aXjBUfCLzZ01Ld3ndfvOzkCxi6mFaX4vpZDFYDbz3erpdVd0MxvdXvUsekCdUlg= + =XcVu + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/deployment/cluster-2.yaml b/deploy/site/vm-mc/deployment/cluster-2.yaml new file mode 100644 index 0000000..6c10c1c --- /dev/null +++ b/deploy/site/vm-mc/deployment/cluster-2.yaml @@ -0,0 +1,65 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: cluster-2 +spec: + interval: 5m + chart: + spec: + chart: deploy/cluster + sourceRef: + kind: GitRepository + name: icn + interval: 1m + values: + clusterName: cluster-2 + clusterLabels: + site: vm-multi-cluster + controlPlaneEndpoint: 192.168.151.253 + keepalived: + interface: ens6 + routerId: 4 + networks: + baremetal: + interface: ens6 + provisioning: + interface: ens5 + userData: + hashedPassword: ENC[AES256_GCM,data:y0/hRz/ZcvRiH+pzu54TElDbTd39yGzYxS08Y6wY2wCbiijUVNo+43KwibMLzz6SIKlUAjcFu+/TZAnTisBkU5zwIbZ3ugm97Mw1F6VrfkYWIfpkKmNgy4E33BymaIbWZn7yJjU52a0AuMcOMEMy+Q==,iv:xALN6JsFIa3YqLiBrx8rucD9sn4CDYwrCGxU+qL8pYU=,tag:+AtJsr0H9no8y4gbDhEjJQ==,type:str] + sshAuthorizedKey: ssh-rsa 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 root@jump + flux: + url: https://gerrit.akraino.org/r/icn + branch: master + path: ./deploy/site/vm-mc/cluster-2 + decryptionSecret: ENC[AES256_GCM,data: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,iv:OkXxO6zoUnjUnvvHtoXLFCkeugNH6s1xqsk0Bs8xSuE=,tag:Ag5FC9AlXRB66dgnc5k77w==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:01Z" + mac: ENC[AES256_GCM,data:RwkeIFbd8L6xl2y5Nbeq3EQryIIqHOdgqcXQS4wCp7kh/+Au47vafWMT6zl1BbSUFlHb3WDd+fpM04cK6syKmllKUmL9V9DPmdMb1DzWzIL1g0Ut9p/WBSpffKUL/pGDBkZs8sZmckKPFkA1/kpw8/r6ZfNV676ek9OZHEEprak=,iv:1CKGZA3oPhV/4kvTXRLn5hv4jTSmiJrOy3PjV5+wszA=,tag:kG2MbUtLrL8HM68uH4Wveg==,type:str] + pgp: + - created_at: "2022-03-08T18:31:01Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPARAAqz/CzZArMREdTrDr36dBz0so7Dfwb2fxTocWsrLJA6wL + sXfxtUds8X0INjlRDC4sCQu+RxgTmGpF4C1Ql/qhhNXIdcLjNFrYFOJ627I8M6dY + 8eLbEJTZHkP7++ByHmm1rlzSpIy7Bp4r/Xu4ZJPh5ZrnGdDK/DUMJlTC9WJmbRMv + Sl1f9MQ/yGkHnbv4CeCbusRJ4bqyijCyYevA5XCq9MEcCgGcoGz3k0u+PxEblQgu + OKUrniyfWW2CEMk6LiWWYpYHtd9FZK9vvFOMmHbsmxB9iTMQxRpwzVcPBaiPBKDE + yzJuQv9BhoYDnK9IHsG+uddcYn5skE5Ast6b4OyDDYwTlkefWrGkhEKeb6g1l5fp + UPpED/v2fD5J5vJvVk8RWpz+SMSi/EUH6TNm9eYkoFZdG7z+ZDOfICo1m1UQNeSp + iGk59kLkcxwzTS+IcsUztWUVTp/QqlHDn1bx1k0q0r2n01LSQG1sTxbv+FqMS3Pb + VeeEbPjDtzQdamo2bLz1+S0rF3yJMmz6cVbVm8/vky3uTkx/c4bpfEeLTLS6E78Q + pNhpMjyyhzISwMczRiRgf+ubVky6D4ak/5TwEUgT1hXpAwIUw35HcD6pBJrxrls3 + Cs45VBCooMZFlAChQZFZiX3rGWyJBOsqapvCbuNTt/aqao7JMfyo/dM5XR4ycPrS + XgHzjIVBXOulKDFPj6r2VKmK7BbHWttK8d9SrKGran/Vsk0ozpfc3pOh5WA6rWXX + I/AKob2e647JyxUpCX9R/YNBfTBa7CP1rh4bIQwdnyJ7GzdfscXB/wQvtacMktk= + =fu1a + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/deployment/icn-source.yaml b/deploy/site/vm-mc/deployment/icn-source.yaml new file mode 100644 index 0000000..77fb400 --- /dev/null +++ b/deploy/site/vm-mc/deployment/icn-source.yaml @@ -0,0 +1,11 @@ +apiVersion: source.toolkit.fluxcd.io/v1beta1 +kind: GitRepository +metadata: + name: icn +spec: + gitImplementation: go-git + interval: 1m0s + ref: + branch: master + timeout: 20s + url: https://gerrit.akraino.org/r/icn diff --git a/deploy/site/vm-mc/deployment/machine-1.yaml b/deploy/site/vm-mc/deployment/machine-1.yaml new file mode 100644 index 0000000..bcf873e --- /dev/null +++ b/deploy/site/vm-mc/deployment/machine-1.yaml @@ -0,0 +1,51 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: machine-1 +spec: + interval: 5m + chart: + spec: + chart: deploy/machine + sourceRef: + kind: GitRepository + name: icn + interval: 1m + values: + machineName: machine-1 + bootMACAddress: 52:54:00:c6:75:40 + bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/ab389bad-2f4a-4eba-b49e-0d649ff3d237 + bmcUsername: admin + bmcPassword: ENC[AES256_GCM,data:TisMKYhUeuY=,iv:ke4jZA8Yk20pDmPW3e4h6GrCRK3ppkwzkAqhB0nc+Bc=,tag:E3cAAfkxFDfb2q2RU0esjg==,type:str] + bmcDisableCertificateVerification: true +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:02Z" + mac: ENC[AES256_GCM,data:VwIqkbsWTv0tSuaA07qxmmaFk2qs6IfjOfw1g8rlN5o2rsfUPKmWBk3pspvMmDFC6y1LPfhvuJgWtuXW0Y3XAWBTbmXu8LrhcdgNXfQ/a6BccJ2Sv6iTm5vOm3swBAM0UW/nDFTYjkaZta0E2r6dAgNPGK4V0A98dj3lqxtyIxM=,iv:BVodjggL8ohvU6efYpbpL8Gd7Ot+zeep5H0tlL69kHw=,tag:ykFEdKrrLPiAk2X9EMy+Bg==,type:str] + pgp: + - created_at: "2022-03-08T18:31:01Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ/8DC8seiD7GnLYVbi0sN8xWtjUy3SrcunjhRK+YNCeVMT2 + 59pYmQiWGcLvDHad16tim5XW2BjtcnOqOVQM6rxdyeKAnZvcSCDkI/+MJko/tQ75 + 5egOD8v82c4vEr9xEJdfdMPs9KEeg8W78kS5zSuyN3bt+Qc7ylbIYzNbIm9yRNLH + xYakkh5CXbeZGDCxig0KEe74o+k0ZfmukNdDygjdkjI8QLHtMRaLpxhUPb8kflPX + BImsYJ559BYdtmrstXl4n1iUE0wKpm+Rs3c/3ZPBy75inIVOOVRjKpjzoolxuqI/ + LPjlB2+dDquJD+vTfz6TYSfvTdEniJJF8NDc3oAA4+iWIwvNlQ3YRC4qg3tpaKQI + 29Tjm43Iux88zcP3A+jL3WTjcEyiXkpziq+ZoloFZwBVV9koMdJiaYuQcsT7GnvX + g07p04p8k9/R+vSZhS+fF/oZ0NwzNd4jLMdARfHh7wXCVz7dEN58bzzuauHbHw3r + Js6Luo+96jXxqW46kPeQtUhd3BqJTPPK5rGnIZLhT5UdkYfcCNTvpyWcv1FifeYc + SpVIb9YctTLIVOWJFdenFZlWYI9gu/g20qY5s/XpNx5rjn4FkhTlxIP93BaEvI03 + Psh1IbGCAIvjz29e2ll0dkXauc2+1iO4kLm0Cf8sTv/xhjtIBpgx2rUuKhAOBUXS + XgFNEe8M1xCvdUF02HqR2swS3NpPqPq4LlCGawTYkA/DVthPxr5Uf0q1y6aKET4V + /OUvkwVXlt6X368PzvtriqknkwZ5HPRqylF+paPq0y05ewYfGhuc+UEQ3yOAyDk= + =9ntm + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/deployment/machine-2.yaml b/deploy/site/vm-mc/deployment/machine-2.yaml new file mode 100644 index 0000000..dd90617 --- /dev/null +++ b/deploy/site/vm-mc/deployment/machine-2.yaml @@ -0,0 +1,51 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: machine-2 +spec: + interval: 5m + chart: + spec: + chart: deploy/machine + sourceRef: + kind: GitRepository + name: icn + interval: 1m + values: + machineName: machine-2 + bootMACAddress: 52:54:00:6f:d6:97 + bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/8d747997-dcd1-42ca-9e25-b3eedbe326aa + bmcUsername: admin + bmcPassword: ENC[AES256_GCM,data:HQLiGUjzEBw=,iv:kaGwIxd9dFjL5/6HTjIGkHGZKREIX8KILlKTS+ae2K4=,tag:qxhRuxwg+oP1L6SIz0YiIw==,type:str] + bmcDisableCertificateVerification: true +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:03Z" + mac: ENC[AES256_GCM,data:fjOvawOmb4lNsboVJy9+hjkkZXN0n1RdDzUzmsppAOgr6xECFlG48BY7Wj0wO1jr36PwjNjSw13zY8Eqpw2Y2BNVfxAaAAFCdwRuwHVchDAFZ8KLaSyb3hB/seBT94nE32BVbElJiTeI7SCQvdHqXEDnA438QFXfPIxMCMCzfAE=,iv:GlQaL55DTF6ndbevhRppdH9fXR+l0Dc4MnmLU2Tzh4Y=,tag:NPe0j+ksqXQ/IhPuowIPng==,type:str] + pgp: + - created_at: "2022-03-08T18:31:02Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ//VorlkeFGlVl1j/2FFkJOnwmVTpQi9ez9JC45qccQQqlC + BnfF79wQQw3MQBUTVoVVVdi7TgzqJm7csfDagkyudN2HhXebb+t/KBRqYXB4tlGc + yc6xk1I4re7jZWexrO5wOD8wCDao5vqUr5YCb9j6cpCR2YHNINdLQyY/R0Q+oc1h + jucQmAMgWrS4eKMy32wEwiqcMkziSXwY8+NFuEG6jPzXU9JuEfW4XZLanBKLtDIg + tf8Eal93MS4w7FXfupJS6PZiyg56g9DxQVEsGEQBSYxy9di+ymtozi37xHRXPRwl + ahr09gayiOlPYbhlcgfu4bgV4pUjj+lyLKy++/wu9+qLZIwStlBwlSwlhuzVMaV8 + uRemXHqBDsMFyulbCJlwIKDFe53Un41FcCvrLdlEDiXLTBaMiu7O/b9j5h6z7LkB + ov8rMuewDnCjPqMX8Hq37oaVRwfTqlIJww9D9k21Xdy3RqhavloUIPNltMN/Dqvw + HRkpaqHHPJNnmwi8xorMfEYrgoYSYoFZA4Q0iCCtgceXQhgHAp5BNvUQRcptzsK7 + XZ2+K27IVXf+EkMpBKM0reXSUKO248Pk9IQNGb4glleEXJZbUbfHLh9MUCcrVwG0 + W2t0h6eFLDXeZKqgijrq2+40YsVyvLbJqcq79wgmSNtqpqjM9bwDdiFYhUZuDvDS + XAF8o0PmxD065/qwxWVQADHBPVtgHw1ICPJZm2fMG4iBs1Y6fZEGOBslaMfg4KBa + iUsY1Qp1iVpb7IHbwkjh4F0cjQoVawbcSicOOUBY1ZIDtCgklVyex0/tj6CQ + =daMD + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/deployment/machine-3.yaml b/deploy/site/vm-mc/deployment/machine-3.yaml new file mode 100644 index 0000000..65e0d70 --- /dev/null +++ b/deploy/site/vm-mc/deployment/machine-3.yaml @@ -0,0 +1,51 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: machine-3 +spec: + interval: 5m + chart: + spec: + chart: deploy/machine + sourceRef: + kind: GitRepository + name: icn + interval: 1m + values: + machineName: machine-3 + bootMACAddress: 52:54:00:50:63:44 + bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/ac3527cc-1223-4794-a0a8-3f6a12f69f17 + bmcUsername: admin + bmcPassword: ENC[AES256_GCM,data:NTXOO995yGU=,iv:jN0ZYhXTRuJ1brnbvEbImQCQPAAtRIM5gthvAUY0wr8=,tag:dVWCZrK4VYaF8Y3Sx28Z/Q==,type:str] + bmcDisableCertificateVerification: true +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:04Z" + mac: ENC[AES256_GCM,data:1Fquam+UEQXpQ7UQfFtUl6uufigcnDlSVuKLYr+ghQRCKZlEfDhm+WyWVns7WE0iWPlYDl1AOx7xqrlQi3ubyG1Rati7i9ntR4jUgvrAOxz93B+RD30aCSfLW4SfdhsGZUwEzr6CmIRvheQX+40xnhF3/9mE486HzYvYqWRqyUA=,iv:M+mCa+7CY6DG1kcNNI1KHlbR4I7yjLAK9EEDukciOtk=,tag:VKMSqwsZuYVGL1yuTAlFOw==,type:str] + pgp: + - created_at: "2022-03-08T18:31:03Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ/+NQDPJOBkylBJRzeM+jT/SwL+3yBH1618JBK2Said9D8h + JmOFyMdaK83c822F9LxBnErh7f2pamWQdeTnjyrIkPgjwaM6q8dgrnqj8S+hprUL + zMlHQNcTjpmjPl4im/MHosd1umBkMKKDIhD5EI27cl3VNh6ribuPAcL4Veve5Aeb + zT2GcjL+zVNpsZhS4sSuSH06mW3UIjiDyIvj8aFTpZ974Ah54M9FnjyZ7G+13fS+ + dUln9J1W3CxIHhmNaISAmHksEGC6GWQKDBtaDl1gIyLgcbA5PAPn6W0QNnl5G1XF + bJL4UOCoY2CQb1t743/N6d286xjzHELE62u2sBN/Akhlt593kFZCs9KxEB/sczCw + Eb1mROOcVboHtv3FG+JYayVKtR5I1OT3LRW5meQwwFIM4IXbENNP1WeFyxafJ7gA + lxhVRRp/y5OwY0E1bUrFv/ywf0B+8xvqUEsTUGM7ScF7gLMrwzNh/9MevJq/Xgc9 + RqbBVuMaWpQcS3JvCLYlLkeKYKwWN2zue8p5mZVABV6muCl6lt2OrwijnthI47xD + aqm+bIdbt1rkPHDoaiMmjXdNA2y1LknX/uLkTwCXlopaAvG3inzRNWd5l0hk/bj0 + o5m+GxhXykVngF/C4WrA4YvJt183fwOZ2zHPXzDPJr8MkOqPtY5KpiQKt/kiUNzS + XAGijQ433tDjHsVtaXf4VTWPJmwro344cz+XbDK3GUJ4/G2ffKEBwSA0wpMTH9uA + kXEWKihXhDx3qYJaNi0W+c1OsFVbHOUpyXkL05TW2n2lLW/7HyNJ54zFxzM4 + =JJlS + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/deployment/machine-4.yaml b/deploy/site/vm-mc/deployment/machine-4.yaml new file mode 100644 index 0000000..f6ce1e5 --- /dev/null +++ b/deploy/site/vm-mc/deployment/machine-4.yaml @@ -0,0 +1,51 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: machine-4 +spec: + interval: 5m + chart: + spec: + chart: deploy/machine + sourceRef: + kind: GitRepository + name: icn + interval: 1m + values: + machineName: machine-4 + bootMACAddress: 52:54:00:7a:b4:55 + bmcAddress: redfish-virtualmedia://192.168.151.1:8000/redfish/v1/Systems/41d41744-3dc6-453d-a498-dbd795c5d748 + bmcUsername: admin + bmcPassword: ENC[AES256_GCM,data:yQyefgnkxJ0=,iv:sDEd1oMnQsDOumMf+Lbqxn91YAIoFh6YE+t2/K6z/2Q=,tag:70UVJP8ecqy4OTIyDE6imA==,type:str] + bmcDisableCertificateVerification: true +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2022-03-08T18:31:04Z" + mac: ENC[AES256_GCM,data:yYArxxj1YnKCGCpPTF0UqwjFBr1vXWiOIvscNyKWy4iGZrhjxTfn4C+UBbWARWT+H+xbuyMvmGVkWhYQzkTwLxT53HiWZyWXGO1A0nmauPnfhFh8TD0SYDNGnzvK2zvquclw/ZCwAv6ari8Gp/VprLBl/kdmK+R8XfCM5f9o3JU=,iv:vcVHOilp2MEiPryEoRDSVH6+W3VN+GsW9ow1w7PY+tQ=,tag:4S9Dd2NS+8JOlVmQXmWx8Q==,type:str] + pgp: + - created_at: "2022-03-08T18:31:04Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4SX7nk+q+zPAQ/5AZq9ISz8y8+OMWlLaiXcfYodfbxyL9LAUutJqzToM4yM + 4jQGaJ1cWU1WfvuqbgSJMbo5Z1vBQucYaVMgRMrcnqFTEAgc0Al2LUUSXfK20Dfn + 4KlgyYUFDRCXzQ8BtViWuiM/cTwhbGujmSgVVO8Gkb+fUKT7/fhXVRrtD4Rp7fa/ + iMXI64hKknJuhp2a5vq8D7ZmsHa2HpHee2EAIecAL/ULKvcHV30E/pO0w/FOQEhT + P7u+zEYHxjRi/E4jbjXjQo6SMqCSQpMVC5YHyxwbHga/X6csoqz8g8U/p6Ht032x + KtpWgfcVgNaJsnaYzBxUnin6NXu3YFDASbTF//p2KhUDF7rY+1NZvPnAlUGG8j3H + CQxyxLlbMbAPIEo+7M60UOn+96zMzLtQeYlKHhV7LChDIgxBJU9gggfjYL1Z+6Ev + UX+jDEcuQLP1/4yUwgpCHaSPnBpSvX0+Pce71sUeAZYQ0ZFXow4W00mSOHiKiRU5 + G5rQgvkKPsIPEu9OTVsW4kPsRcfifPxHWkDhx8y1zR3SodmF2QdNENKPbxBttaZg + wFl1iREjLVZdTxG5OcK06AUnDcwOy2Xn+3ZQTleTRQPHl4N3NcEf9zL/oJgHmeJ/ + Fy8ddxP82sDDcDS1HHFtxV+LqRmiS17l6lh+ohYcU4DBnaBwIl7vFzYuvt6sx/rS + XgFks1kHiLU1it6z7DWiYaZjIYZMk+yl5NzfRRZU6kH4ODMuL7/8vbksLgfkUsJu + EGtJSeLROdaymAOc03/CMdKz9eZ2f9cpkKoZVnL0E1e0IslqMkW+1icfIfsZhyg= + =dXIt + -----END PGP MESSAGE----- + fp: A4B4A47A1DB07DE00E8158BE411E23534CA8FAE0 + encrypted_regex: ^(bmcPassword|ca-key.pem|decryptionSecret|hashedPassword|emcoPassword|rootPassword)$ + version: 3.7.1 diff --git a/deploy/site/vm-mc/id_rsa b/deploy/site/vm-mc/id_rsa new file mode 100644 index 0000000..cc6d521 --- /dev/null +++ b/deploy/site/vm-mc/id_rsa @@ -0,0 +1,38 @@ +-----BEGIN OPENSSH PRIVATE KEY----- +b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn +NhAAAAAwEAAQAAAYEAuymUhCns8U1tcSUUCbzFjoYWuqFOSia4wZwYET1ta4P3qgdtlP6X +EwjQrFVcHG7mERZpIbx8Hzhumj0Ji/1zCjvfuhIUt5f4bTNHdLoQ8Gv0gOFtUHkaVfmkEJ +Jz/7vHgVcPaHS5PmH/qQYIHpFOLZE4UDyHlxV5k0DDzrYRP1j83htKCiP4s/ra05u/jTXQ +UhPX8JbI2z0xuVKYaaprgKY12hHZIrJ6jE3fHKbx3tt3sL4UuqUH/RvuROoIlPChmqGrvW +70LgCI48nJGC5JD9yo3XwgHTpHcuXscUHOYaZlzZjP09YXcMIgWNX1/weSF7Twr1kTWoDq +UB0v4G5w+YW01rWJ2jTuwg/gHoC2TiLWk6foLsxbWPglfH5/lIxlAJhOVaobfqrdAsZUqa +SfDFobxJ0mInApH7a3K8rtqOiq+6Ro0Ou9q6QDm8oTOkt8NuN3v3/2/FlCYHYtH+8FaxMx +yXzuUMTt6DMlpYVxJH8s5oiXtixgZsqyd8R2BG2LAAAFgITZa/2E2Wv9AAAAB3NzaC1yc2 +EAAAGBALsplIQp7PFNbXElFAm8xY6GFrqhTkomuMGcGBE9bWuD96oHbZT+lxMI0KxVXBxu +5hEWaSG8fB84bpo9CYv9cwo737oSFLeX+G0zR3S6EPBr9IDhbVB5GlX5pBCSc/+7x4FXD2 +h0uT5h/6kGCB6RTi2ROFA8h5cVeZNAw862ET9Y/N4bSgoj+LP62tObv4010FIT1/CWyNs9 +MblSmGmqa4CmNdoR2SKyeoxN3xym8d7bd7C+FLqlB/0b7kTqCJTwoZqhq71u9C4AiOPJyR +guSQ/cqN18IB06R3Ll7HFBzmGmZc2Yz9PWF3DCIFjV9f8Hkhe08K9ZE1qA6lAdL+BucPmF +tNa1ido07sIP4B6Atk4i1pOn6C7MW1j4JXx+f5SMZQCYTlWqG36q3QLGVKmknwxaG8SdJi +JwKR+2tyvK7ajoqvukaNDrvaukA5vKEzpLfDbjd79/9vxZQmB2LR/vBWsTMcl87lDE7egz +JaWFcSR/LOaIl7YsYGbKsnfEdgRtiwAAAAMBAAEAAAGAUpW4WND/IkKeBgzsWJeZPJhiMx +u2JfYMFDJCVGkcfRKQF9CLQ/FKzDVZjpFjwZAVqHiRDzfSNRx7gUdpjQHa3ysoPzx3M8O0 +9Mppv1HS46NfEfdmetnVCxbKlB1rXe6Hy8SUoezPSH2JiBWHQ6WuL2EizhTHZ50sNhOf0v +h3h9JGUeMMuojA1vnb0P+qeC7Eq1LiN+Dw4/yOkk2lvwpZwTyWCpFRlIPYm0xJJKVtmH6S +w8Q79VeYvNC0RGhYPRAoHTEYggYWC4l0OOXgEg1Squ3bSFdbdl94siDUk1Vg/GVaL/QmRi +Lm1dmS1ibiAVPNCT51zsgNJW70ktgvN6jZavEjy1LihOxR5lxte/VWlMpU0Y7cCxhDo0k2 +BID3DnuI77E6m2iOCfjR/kOWcHIys0MitGHkLNr4rwAywdTRzMn0XaBmLKFTziiqZ4eIv/ +Ls7RR2ssIalhnfBd72wdsMKXaMKOOyEx4LKOg77HVkqeoOakuZ3rpCQuDFuJQLgWUxAAAA +wEvvp2eQxgFUHSwvs27QHTukS+5K7MsTrUMvoQagcQ4GQv0c+ggEdzECggBQSDxm0ut2c9 +KmN5lqHOPvBHEH5zgS4ZqtIIQ+YEUXyHJQ9WDJ6qgMK8xKm2hotjK2w/Rzn9lZfPSAj7j2 +lRUixrxUxauucBWMzrH73cuWMCRcX0hKzf+trcpPeknuQUwwOQNZ/8igFgvY9QTuNaDsNZ +Vv3irqPoLa5dpTu6rKLJVLtZ6SXTIOH925x70OTbVNBlbFbgAAAMEA6dJcwLK7lVAhOe6h +VxspFByTzAAeTWgHYxQ2tbalWx6NUATZgvkO3Pm7KTTDstntMOtQ6GDqnN0pc6B0d+1urF +Uv93wVH22e+llJF6pron7YXTPleH07lIvhmLMNM9x3+m6wJ7O6g0KdV6LgJyGCQmN1f/CU +a/8aiFvy67duJcKFUUGiqFy+ZrcRpauvPZBnXJJ6QXMJcm30k+De9VQZxv1u9tLMUhooij +aIprjVmF0MDbhulEL372423ik8I3dtAAAAwQDM6j2pX6zaM/BzdvhySrH/CfJYuX/E7J8f +72U1LdC/y5Sq/Sonflrh2/ietv1/qrXxQX85WLBQd+E15Fexly8iDfzAAQxpfIR3AodxU6 +hdjWwcLnNDxWyKiXeghhlp7JJKpRv4N3xilfI74ev8BH3+1S/XmsU++Wi6lIXx//RsZmOj +OeT5YOgUdlCqPA/kVfoQkhOc9OzmSIeb6WHGzW7wPyQ5cdtllijctWCz7gr4+o3fZjqRuB +uiF7FSziC+BdcAAAAJcm9vdEBqdW1wAQI= +-----END OPENSSH PRIVATE KEY----- diff --git a/deploy/site/vm-mc/id_rsa.pub b/deploy/site/vm-mc/id_rsa.pub new file mode 100644 index 0000000..0072da3 --- /dev/null +++ b/deploy/site/vm-mc/id_rsa.pub @@ -0,0 +1 @@ +ssh-rsa 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 root@jump diff --git a/deploy/site/vm-mc/sops.pub.asc b/deploy/site/vm-mc/sops.pub.asc new file mode 100644 index 0000000..34a3c25 --- /dev/null +++ b/deploy/site/vm-mc/sops.pub.asc @@ -0,0 +1,63 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBGGuW6EBEADPL46O8WFQzLgKGpRE14fqxpUChIiTtTBI9RnTQ4RdYKdZEJGE +AfWkx3mmp0ih9BUHNBzf9knPgq+KUiyaLBt9HB2PVgXxkVspsovHVTCS4Sp4iBRf +CHPhAFAoeZSLo3I/k7W0tTxDKhRWL9qI2APU/2PDFrNX1BqwhKhIPjIX8ipx32iV +QMBAYhhtF7xHsDttX/KGiU7U3klLasnFUfYSbmrHybl7VLTbivAdHe5ejkfMx4BI +IjSloD6HLrdovWaYoaADtK2pIzx0W4EtE76doIGpcl6XEqk2VEsXFwjlvmk/FZT8 +HsTnba5Q+VaiDdt8nWkmA5kkz2bp/uklndN3BQkyWhdU8orSXsRibP2uBXr3p8yw +LfarjBMcqiUPRS8GBW4VR2eYse9qBJAJ/CKUK3LhA1wONmpWE1iYH4KFsIYdUlcf +tQ0J0ojUWyaCxMlkQ2aSDCt/x46gQ8BPn4OwAEQlRhn9R0bK6ZgYQ+AGdzAdlFbZ +5qJO5/v6/rad+ZWoMKcRS1eJECsn1l6EwuDSZEjSnXULTMiXLAVW7btFtRrogHRJ +jcxD3sIyAhh7ITyLfsf9LJHWB9QP18a8PoVfwtARTZ5jnjmPuxtLS262t/TgCmWa +W54h8dr2jyhOzSE2YSGH4wp83Cl8IwStXQ02S/NNsi470h32ehZO7ksY1wARAQAB +tAtpY24tc2l0ZS12bYkCTgQTAQoAOBYhBKS0pHodsH3gDoFYvkEeI1NMqPrgBQJh +rluhAhsvBQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEEEeI1NMqPrgfIwP/36q +cRUVAb+kZPJKYncG3SK1cYp7ErBTcGFi5VIlAWzBE81mhXefJPlgm+15Dzdxb46p +xTE7g61zXsBVxC2mn60XmAf/wkrPK+snJer89B9HLhzHPINJHq6qHfipfNgmOqZ6 +iGo/XOFCCNBXZ2laRPzDjnc9teBTkOSjfdHuCoh9Qk9ghP2wF8t0kx0a+sUrZYV9 +BGTi8pBdUGKQ3kyUQOZRiPdCB2Nieg83ljiUHjM3Qih3BxxqEYjSSdlcCPyWFc/J +TKryV/IX0p8xg6XeQedyojm4FDZUTpxr8yotNVfx+s2XZ0iQd8m2WCZcGrCweYNQ +UqTEAkmvXrEmWGVLMaBJrtzuKQo6QC2gwEw0PCpv+kZJaKukUf0gowYbwEkKCWpX +HunAoLY1Jfi6ha0qvOtddZqXZaRWU+CDfMnR23dmppJXSnePrCTGQhhI6gH//VK5 +/uI3lCA4ifOWC25lSzCdfdSObvR89x5bTP3kVvx1kTbz/Fsuq5ob1J78uv3VNrKM +0MTx0jjgkCKc5mVoqwAW/n5b3uCZw6JTBSRvR3bRU9g0Lsw1R/xKwJBc8Tf6CK8Z +gzzxhFd+tKgL2E9OYWFMgdg/s8k2r42xpShOwJHn20dJXUGjYERgqLYP4mSKzwP2 +5qou3dZ5RgMKMJfWiVhHcLvHOZQctfpKzUdGI/uSuQINBGGuW6EBEACstgYqJX5S +xQZCPN4DwhBoqSxf+B4xXh0gK737bpeQaM+bAjSCdF3YQVY6vXn6LKh+d78Z2PDf +K1Xskspai7d0h4w9Lf5kmc1vv8yVPhBnz7x32uBH/LhHCp1SJ34d/0+djX65JIh7 +ytDxmzcE69cQKdqt2cj6DzsjPrNM+0e5oqmme0lUi0QgzwhqUtyS0VP9BOziD/nq +odzmONqzIToLfj7925FZwn2Xwcan7ZYzxQ2uKZvc1w6jaiaPkBoEzDOygQVhypj0 +GmGyO4dF96c+y/++6nry0nZuZzfiBVo+K+786uTETAYRJ6BEes/QlXxTGgQpE2VG +7p5Z/tDQO/A3aFb88hgWlQ4Ot1Lbn7BlUvlA1ELXwloV5nTiqmTpNwSiAuARCqst +WM3x1vugZUNEZGZkRAEtjahAjypBvls4a5iIlWbqVmdcACntvZZKF5KwByGwOpro +jzXRDzoSVUyxG0zMIZAWHipGF4IpFjAYx3OPGlafYDq3gfoe4MxoD/9wOwDvNocj +MDHWzBOIstOMlKG13zsCH4JdftQR1xspsWe0gA1jo183rrCQiNk8bLsr+UANyFAa +jy2/PGBOybaqPe80h7YakwfZARQlLRQNDZpJpGV2L/9m2+qYrbi/Zq8h46Lkvmz4 +tGNdGfqNuju8DiJxNovtH8/cleFjEGClGwARAQABiQRsBBgBCgAgFiEEpLSkeh2w +feAOgVi+QR4jU0yo+uAFAmGuW6ECGy4CQAkQQR4jU0yo+uDBdCAEGQEKAB0WIQTg +LN375XITuuX10GGEl+55PqvszwUCYa5boQAKCRCEl+55Pqvsz15kD/9vzNhoKAtd +JcdkeFv3wm75kapgEMMMitFeDO1c2uIg+bnTCIBoZRHO2RNHUS+d7ADCiTyWY3JJ +BBr4LLHurg1AyQGXJ4Tf9W/ku3vfevoubzBtaH6YzZTcfWga35BN8KiIN3ZAiChy +mNlxvr2YxaK0iX6eTXDWd3kvYmvVqQJO0hI5EOwXUWgY5VNBKVwjrYv34hqYE4+J +Q1IsdcVvNjDkUAJO2y6vIiD7UiN0JKtK1JRCw1N+wOruNiuoky0UWCmMdUGSmnkP +yX7cKpRDXHTeU560G1fEGPr5jc93Pd6LtyC/8eAJbC7w+fLn6+4hNzhRAxB/Z0H5 +mzBS+CuvUaX4yh3qgQTj20zeXKVRb3hRyQTmoEmtb7Udr/5C/GtDZJ97JwiAIiS7 +eeA89c8g/eAVXxN8hFAlTl8rTKEVnOIAiCPSo1QWHdmhYlaButyATkOoz9aGeA5c +0/LWXJCsDSkzveNAnx6HGaG0rUtsd+Ee9QJCAhyhRsLisbpIjuhwkJOnCJh8zN7z +XfiNUbr4SR4okBZsfws2g9yTTYI/i6IiZMrA+0UKFuYBceXeKgXtI8xy9IqVvnCf +Hj0gI2PHSDnWVQWemqFt9TPEbBZBOzlzmV9pldhmDm8m11GkZFDpnpRK7ZnuJy3M +jGnIM948OBXjxheBbr8LPX2VCU8vzsPyQHgHEAC/KRTx+GUg56vzW/1czY5i5HpS +owl480uFAZYnmVOBkk2WztYizBR5vRGLaYFD5YyEnTML3ERTx5H+sbb/1pKtWD6s +RVKR+LVtlQkBlAU263e0fKxs6qG20Z57m8mOJqPCnz9D0Deq4BBmQY6sApYCPa6x +QzPPv40MOqeRv3zlSQIBhhF637Iad2rjOwgq6deezHGuqmSmCj2bo29oUi9zBhLf +9pSfPYehLP6EXOPt0trdSL3HvV5icGMwRiCOx9LwmA49p7f0jDUs0Jo3OowS/4aJ +8rlwbFMmerCVIWokGBL77j6Wc5ucAyj+ZzE7xfeberLa2sL1W1CDEs9IPLgXh+kI +F5JAntVNyB5lfxPtNfV/XuCzCjJJgCwZOLCzwQg5cxRAHmRVorWq/5bmeWIKBX8q +JqdvBSPW1IXVBz/6gpI3dU2ZF635F9qizJV/jyzV63lYRnTffRL4L/B8QR5iNlVI +y/7Urqx2MgMsxmYJB38sOr0oO2dljUJdar3ZWCTIG/9oTg8quWt4lDcPfCsZp2Bk +YhiZbE3p9iSSfmfO9gLgI8Dy4ZvZEavBU20B7qbiFYCAL+q+ZUUQAbYOTyZ0fZI6 +lKJuHN01R2ltDi3md55lsTL8bBGH2/bKR6YYkYPXzc/fqMGgHsaJ0IddRTKULcxW +SqmNDCYCCn2EJbwrHQ== +=8GKa +-----END PGP PUBLIC KEY BLOCK----- diff --git a/deploy/site/vm-mc/vm-mc.sh b/deploy/site/vm-mc/vm-mc.sh new file mode 100755 index 0000000..4e1aa71 --- /dev/null +++ b/deploy/site/vm-mc/vm-mc.sh @@ -0,0 +1,183 @@ +#!/usr/bin/env bash +set -eux -o pipefail + +SCRIPTDIR="$(readlink -f $(dirname ${BASH_SOURCE[0]}))" +LIBDIR="$(dirname $(dirname $(dirname ${SCRIPTDIR})))/env/lib" + +source $LIBDIR/common.sh +source $SCRIPTDIR/../common.sh + +BUILDDIR=${SCRIPTDIR/deploy/build} +mkdir -p ${BUILDDIR} + +SITE_REPO=${SITE_REPO:-" https://gerrit.akraino.org/r/icn"} +SITE_BRANCH=${SITE_BRANCH:-"master"} +SITE_PATH=${SITE_PATH:-"deploy/site/vm-mc/deployment"} + +FLUX_SOPS_KEY_NAME=${FLUX_SOPS_KEY_NAME:-"icn-site-vm"} +FLUX_SOPS_PRIVATE_KEY="${SCRIPTDIR}/../secrets/sops.asc" + +# !!!NOTE!!! THE KEYS USED BELOW ARE FOR TEST PURPOSES ONLY. DO NOT +# USE THESE OUTSIDE OF THIS ICN VIRTUAL TEST ENVIRONMENT. +function build_source { + # First decrypt the existing site YAML, otherwise we'll be + # attempting to encrypt it twice below + if [[ -f ${FLUX_SOPS_PRIVATE_KEY} ]]; then + gpg --import ${FLUX_SOPS_PRIVATE_KEY} + for yaml in ${SCRIPTDIR}/cluster*/*.yaml ${SCRIPTDIR}/deployment/*.yaml; do + sops_decrypt ${yaml} ${SCRIPTDIR} + done + fi + + # Generate user password and authorized key in site YAML + # To login to guest, ssh -i ${SCRIPTDIR}/id_rsa + HASHED_PASSWORD=$(mkpasswd --method=SHA-512 --rounds 10000 "mypasswd") + ssh-keygen -t rsa -N "" -f ${SCRIPTDIR}/id_rsa <<${SCRIPTDIR}/${name}/istio-cacerts.yaml + done + + # Encrypt the site YAML + create_gpg_key ${FLUX_SOPS_KEY_NAME} + for yaml in ${SCRIPTDIR}/cluster*/*.yaml ${SCRIPTDIR}/deployment/*.yaml; do + sops_encrypt ${yaml} ${FLUX_SOPS_KEY_NAME} ${SCRIPTDIR} + done + + # ONLY FOR TEST ENVIRONMENT: save the private key used + export_gpg_private_key ${FLUX_SOPS_KEY_NAME} >${FLUX_SOPS_PRIVATE_KEY} +} + +function deploy { + gpg --import ${FLUX_SOPS_PRIVATE_KEY} + flux_create_site ${SITE_REPO} ${SITE_BRANCH} ${SITE_PATH} ${FLUX_SOPS_KEY_NAME} +} + +function clean { + kubectl -n flux-system delete kustomization $(flux_site_kustomization_name ${SITE_REPO} ${SITE_BRANCH} ${SITE_PATH}) +} + +function is_cluster_ready { + for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do + name=$(awk '/clusterName:/ {print $2}' ${yaml}) + if [[ $(kubectl -n ${SITE_NAMESPACE} get cluster ${name} -o jsonpath='{.status.conditions[?(@.type=="Ready")].status}') != "True" ]]; then + return 1 + fi + done +} + +function is_control_plane_ready { + # Checking the Cluster resource status is not sufficient, it + # reports the control plane as ready before the nodes forming the + # control plane are ready + for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do + name=$(awk '/clusterName:/ {print $2}' ${yaml}) + local replicas=$(kubectl -n ${SITE_NAMESPACE} get kubeadmcontrolplane ${name} -o jsonpath='{.spec.replicas}') + if [[ $(kubectl --kubeconfig=${BUILDDIR}/${name}-admin.conf get nodes -l node-role.kubernetes.io/control-plane -o jsonpath='{range .items[*]}{.status.conditions[?(@.type=="Ready")].status}{"\n"}{end}' | grep -c True) != ${replicas} ]]; then + return 1 + fi + done +} + +function insert_control_plane_network_identity_into_ssh_config { + # This enables logging into the control plane machines from this + # machine without specifying the identify file on the command line + + if [[ ! $(which ipcalc) ]]; then + apt-get install -y ipcalc + fi + + # Create ssh config if it doesn't exist + mkdir -p ${HOME}/.ssh && chmod 700 ${HOME}/.ssh + touch ${HOME}/.ssh/config + chmod 600 ${HOME}/.ssh/config + # Add the entry for the control plane network, host value in ssh + # config is a wildcard + for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do + name=$(awk '/name:/ {print $2; exit}' ${yaml}) + endpoint=$(helm -n ${SITE_NAMESPACE} get values -a ${name} | awk '/controlPlaneEndpoint:/ {print $2}') + prefix=$(helm -n ${SITE_NAMESPACE} get values -a ${name} | awk '/controlPlanePrefix:/ {print $2}') + host=$(ipcalc ${endpoint}/${prefix} | awk '/Network:/ {sub(/\.0.*/,".*"); print $2}') + if [[ $(grep -c "Host ${host}" ${HOME}/.ssh/config) != 0 ]]; then + sed -i -e '/Host '"${host}"'/,+3 d' ${HOME}/.ssh/config + fi + cat <>${HOME}/.ssh/config +Host ${host} + IdentityFile ${SCRIPTDIR}/id_rsa + StrictHostKeyChecking no + UserKnownHostsFile /dev/null +EOF + done + # Add the identity to authorized keys on this host to enable ssh + # logins via its control plane address + authorized_key=$(cat ${SCRIPTDIR}/id_rsa.pub) + sed -i -e '\!'"${authorized_key}"'!d' ${HOME}/.ssh/authorized_keys + cat ${SCRIPTDIR}/id_rsa.pub >> ~/.ssh/authorized_keys +} + +function wait_for_all_ready { + WAIT_FOR_INTERVAL=60s + WAIT_FOR_TRIES=30 + wait_for is_cluster_ready + for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do + name=$(awk '/clusterName:/ {print $2}' ${yaml}) + clusterctl -n ${SITE_NAMESPACE} get kubeconfig ${name} >${BUILDDIR}/${name}-admin.conf + chmod 600 ${BUILDDIR}/${name}-admin.conf + done + wait_for is_control_plane_ready + insert_control_plane_network_identity_into_ssh_config +} + +function is_cluster_deleted { + for yaml in ${SCRIPTDIR}/deployment/cluster-*.yaml; do + name=$(awk '/clusterName:/ {print $2}' ${yaml}) + ! kubectl -n ${SITE_NAMESPACE} get cluster ${name} + done +} + +function wait_for_all_deleted { + WAIT_FOR_INTERVAL=60s + WAIT_FOR_TRIES=30 + wait_for is_cluster_deleted +} + +case $1 in + "build-source") build_source ;; + "clean") clean ;; + "deploy") deploy ;; + "wait") wait_for_all_ready ;; + "wait-clean") wait_for_all_deleted ;; + *) cat <