unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

consul: add k8s servers joining the au-syd1 VM datacenter
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details

Browse Source
This commit is contained in:
Unkin Agent
2026-10-09 22:34:51 +11:00
parent 41abdd42ef
commit e66abc17d0
8 changed files with 357 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/overlays/au-syd1/consul/kustomization.yaml
+15
View File
@@ -0,0 +1,15 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: consul
resources:
- ../../../base/consul
- statefulset.yaml
- services.yaml
configMapGenerator:
- name: consul-server-config
files:
- server.json
apps/overlays/au-syd1/consul/server.json
+51
View File
@@ -0,0 +1,51 @@
{
"acl": {
"default_policy": "deny",
"down_policy": "extend-cache",
"enable_token_persistence": true,
"enabled": true
},
"auto_reload_config": true,
"bind_addr": "0.0.0.0",
"client_addr": "0.0.0.0",
"connect": {
"enabled": true
},
"datacenter": "au-syd1",
"disable_remote_exec": true,
"disable_update_check": true,
"leave_on_terminate": false,
"performance": {
"raft_multiplier": 10
},
"ports": {
"dns": 8600,
"grpc": 8502,
"http": 8500,
"https": 8501
},
"primary_datacenter": "au-syd1",
"retry_join": [
"198.18.200.11",
"198.18.200.12",
"198.18.200.13",
"198.18.200.14",
"198.18.200.15",
"ausyd1nxvm2005.main.unkin.net",
"ausyd1nxvm2006.main.unkin.net",
"ausyd1nxvm2007.main.unkin.net",
"ausyd1nxvm2008.main.unkin.net",
"ausyd1nxvm2009.main.unkin.net"
],
"server": true,
"tls": {
"https": {
"cert_file": "/consul/tls/tls.crt",
"key_file": "/consul/tls/tls.key",
"verify_incoming": false
}
},
"ui_config": {
"enabled": true
}
}
apps/overlays/au-syd1/consul/services.yaml
+151
View File
@@ -0,0 +1,151 @@
---
apiVersion: v1
kind: Service
metadata:
name: consul-server
namespace: consul
spec:
clusterIP: None
publishNotReadyAddresses: true
selector:
app: consul
component: server
release: consul
ports:
- {name: server, port: 8300, protocol: TCP}
- {name: serflan-tcp, port: 8301, protocol: TCP}
- {name: serflan-udp, port: 8301, protocol: UDP}
---
apiVersion: v1
kind: Service
metadata:
name: consul-dns
namespace: consul
annotations:
purelb.io/service-group: common
purelb.io/addresses: 198.18.200.5
spec:
type: LoadBalancer
externalTrafficPolicy: Local
selector:
app: consul
component: server
release: consul
ports:
- {name: dns-udp, port: 53, protocol: UDP, targetPort: 8600}
- {name: dns-tcp, port: 53, protocol: TCP, targetPort: 8600}
---
apiVersion: v1
kind: Service
metadata:
name: consul-server-0-lb
namespace: consul
annotations:
purelb.io/service-group: common
purelb.io/addresses: 198.18.200.11
spec:
type: LoadBalancer
externalTrafficPolicy: Local
publishNotReadyAddresses: true
selector:
statefulset.kubernetes.io/pod-name: consul-server-0
ports:
- {name: server, port: 8300, protocol: TCP}
- {name: serflan-tcp, port: 8301, protocol: TCP}
- {name: serflan-udp, port: 8301, protocol: UDP}
- {name: serfwan-tcp, port: 8302, protocol: TCP}
- {name: serfwan-udp, port: 8302, protocol: UDP}
- {name: http, port: 8500, protocol: TCP}
- {name: https, port: 443, protocol: TCP, targetPort: 8501}
---
apiVersion: v1
kind: Service
metadata:
name: consul-server-1-lb
namespace: consul
annotations:
purelb.io/service-group: common
purelb.io/addresses: 198.18.200.12
spec:
type: LoadBalancer
externalTrafficPolicy: Local
publishNotReadyAddresses: true
selector:
statefulset.kubernetes.io/pod-name: consul-server-1
ports:
- {name: server, port: 8300, protocol: TCP}
- {name: serflan-tcp, port: 8301, protocol: TCP}
- {name: serflan-udp, port: 8301, protocol: UDP}
- {name: serfwan-tcp, port: 8302, protocol: TCP}
- {name: serfwan-udp, port: 8302, protocol: UDP}
- {name: http, port: 8500, protocol: TCP}
- {name: https, port: 443, protocol: TCP, targetPort: 8501}
---
apiVersion: v1
kind: Service
metadata:
name: consul-server-2-lb
namespace: consul
annotations:
purelb.io/service-group: common
purelb.io/addresses: 198.18.200.13
spec:
type: LoadBalancer
externalTrafficPolicy: Local
publishNotReadyAddresses: true
selector:
statefulset.kubernetes.io/pod-name: consul-server-2
ports:
- {name: server, port: 8300, protocol: TCP}
- {name: serflan-tcp, port: 8301, protocol: TCP}
- {name: serflan-udp, port: 8301, protocol: UDP}
- {name: serfwan-tcp, port: 8302, protocol: TCP}
- {name: serfwan-udp, port: 8302, protocol: UDP}
- {name: http, port: 8500, protocol: TCP}
- {name: https, port: 443, protocol: TCP, targetPort: 8501}
---
apiVersion: v1
kind: Service
metadata:
name: consul-server-3-lb
namespace: consul
annotations:
purelb.io/service-group: common
purelb.io/addresses: 198.18.200.14
spec:
type: LoadBalancer
externalTrafficPolicy: Local
publishNotReadyAddresses: true
selector:
statefulset.kubernetes.io/pod-name: consul-server-3
ports:
- {name: server, port: 8300, protocol: TCP}
- {name: serflan-tcp, port: 8301, protocol: TCP}
- {name: serflan-udp, port: 8301, protocol: UDP}
- {name: serfwan-tcp, port: 8302, protocol: TCP}
- {name: serfwan-udp, port: 8302, protocol: UDP}
- {name: http, port: 8500, protocol: TCP}
- {name: https, port: 443, protocol: TCP, targetPort: 8501}
---
apiVersion: v1
kind: Service
metadata:
name: consul-server-4-lb
namespace: consul
annotations:
purelb.io/service-group: common
purelb.io/addresses: 198.18.200.15
spec:
type: LoadBalancer
externalTrafficPolicy: Local
publishNotReadyAddresses: true
selector:
statefulset.kubernetes.io/pod-name: consul-server-4
ports:
- {name: server, port: 8300, protocol: TCP}
- {name: serflan-tcp, port: 8301, protocol: TCP}
- {name: serflan-udp, port: 8301, protocol: UDP}
- {name: serfwan-tcp, port: 8302, protocol: TCP}
- {name: serfwan-udp, port: 8302, protocol: UDP}
- {name: http, port: 8500, protocol: TCP}
- {name: https, port: 443, protocol: TCP, targetPort: 8501}
apps/overlays/au-syd1/consul/statefulset.yaml
+128
View File
@@ -0,0 +1,128 @@
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: consul-server
namespace: consul
labels:
app: consul
component: server
release: consul
spec:
serviceName: consul-server
replicas: 1
minReadySeconds: 30
podManagementPolicy: OrderedReady
selector:
matchLabels:
app: consul
component: server
release: consul
template:
metadata:
labels:
app: consul
component: server
release: consul
spec:
terminationGracePeriodSeconds: 30
securityContext:
runAsUser: 100
runAsGroup: 1000
runAsNonRoot: true
fsGroup: 1000
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
app: consul
component: server
topologyKey: kubernetes.io/hostname
containers:
- name: consul
image: hashicorp/consul:1.22.7
command:
- /bin/sh
- -ec
# ponytail: contiguous .11-.15 block
- >-
exec consul agent
-config-dir=/consul/config
-data-dir=/consul/data
-node="${HOSTNAME}"
-advertise="198.18.200.$((11 + ${HOSTNAME##*-}))"
-hcl="acl { tokens { agent = \"${AGENT_TOKEN}\" default = \"${DEFAULT_TOKEN}\" } }"
env:
- name: AGENT_TOKEN
valueFrom:
secretKeyRef:
name: consul-server-acl
key: agent_token
- name: DEFAULT_TOKEN
valueFrom:
secretKeyRef:
name: consul-server-acl
key: default_token
ports:
- {name: server, containerPort: 8300, protocol: TCP}
- {name: serflan-tcp, containerPort: 8301, protocol: TCP}
- {name: serflan-udp, containerPort: 8301, protocol: UDP}
- {name: serfwan-tcp, containerPort: 8302, protocol: TCP}
- {name: serfwan-udp, containerPort: 8302, protocol: UDP}
- {name: http, containerPort: 8500, protocol: TCP}
- {name: https, containerPort: 8501, protocol: TCP}
- {name: grpc, containerPort: 8502, protocol: TCP}
- {name: dns-tcp, containerPort: 8600, protocol: TCP}
- {name: dns-udp, containerPort: 8600, protocol: UDP}
readinessProbe:
tcpSocket:
port: 8301
initialDelaySeconds: 5
periodSeconds: 10
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
cpu: "1"
memory: 2Gi
volumeMounts:
- name: data
mountPath: /consul/data
- name: config
mountPath: /consul/config
readOnly: true
- name: tls
mountPath: /consul/tls
readOnly: true
volumes:
- name: config
configMap:
name: consul-server-config
- name: tls
secret:
secretName: consul-tls
volumeClaimTemplates:
- metadata:
name: data
spec:
accessModes:
- ReadWriteOnce
storageClassName: cephrbd-fast-retain
resources:
requests:
storage: 10Gi
---
apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
name: consul-server
namespace: consul
spec:
maxUnavailable: 1
selector:
matchLabels:
app: consul
component: server
release: consul