# and downstream modules can simply declare resources for that provider
# and have them automatically associated with the root provider
# configurations.
-module "alertmanager" {
- source = "./alertmanager"
- providers = {
- nomad = nomad.yul1
- }
-
- # nomad
- nomad_datacenters = ["yul1"]
-
- # alertmanager
- alertmanager_job_name = "prod-alertmanager"
- alertmanager_use_canary = true
- alertmanager_group_count = 1
- alertmanager_vault_secret = {
- use_vault_provider = false,
- vault_kv_policy_name = "kv-secret",
- vault_kv_path = "secret/data/prometheus",
- vault_kv_field_access_key = "access_key",
- vault_kv_field_secret_key = "secret_key"
- }
- alertmanager_version = "0.21.0"
- alertmanager_cpu = 1000
- alertmanager_mem = 1024
- alertmanager_port = 9093
- alertmanager_slack_jenkins_api_key = "TE07RD1V1/B01U1NV9HV3/hKZXJJ74g2JcISq4K3QC1eG9"
- alertmanager_slack_jenkins_channel = "fdio-jobs-monitoring"
- alertmanager_slack_default_api_key = "TE07RD1V1/B01UUK23B6C/hZTcCu42FUv8d6rtirHtcYIi"
- alertmanager_slack_default_channel = "fdio-infra-monitoring"
-}
-
-module "grafana" {
- source = "./grafana"
- providers = {
- nomad = nomad.yul1
- }
-
- # nomad
- nomad_datacenters = ["yul1"]
-
- # grafana
- grafana_job_name = "prod-grafana"
- grafana_use_canary = true
- grafana_group_count = 1
- grafana_vault_secret = {
- use_vault_provider = false,
- vault_kv_policy_name = "kv-secret",
- vault_kv_path = "secret/data/grafana",
- vault_kv_field_access_key = "access_key",
- vault_kv_field_secret_key = "secret_key"
- }
- grafana_container_image = "grafana/grafana:7.3.7"
- grafana_cpu = 1000
- grafana_mem = 2048
- grafana_port = 3000
-}
#module "minio" {
# source = "./minio"
path = "kv/secret/data/minio"
}
-module "minio_s3_gateway" {
- source = "./minio_s3_gateway"
- providers = {
- nomad = nomad.yul1
- }
-
- # nomad
- datacenters = ["yul1"]
- volume_source = "prod-volume-data1-1"
-
- # minio
- job_name = "minio-s3-gateway"
- group_count = 4
- service_name = "minio"
- mode = "gateway"
- port_base = 9001
- port_console = 9002
- image = "minio/minio:latest"
- access_key = data.vault_generic_secret.minio_creds.data["access_key"]
- secret_key = data.vault_generic_secret.minio_creds.data["secret_key"]
- volume_destination = "/data/"
- use_host_volume = true
- use_canary = true
- envs = [
- "MINIO_BROWSER=\"off\"",
- "MINIO_CACHE=\"on\"",
- "MINIO_CACHE_DRIVES=\"/data/s3_cache1\"",
- "MINIO_CACHE_EXCLUDE=\"\"",
- "MINIO_CACHE_QUOTA=80",
- "MINIO_CACHE_AFTER=1",
- "MINIO_CACHE_WATERMARK_LOW=70",
- "MINIO_CACHE_WATERMARK_HIGH=90"
- ]
-}
-
-#module "nginx" {
-# source = "./nginx"
-# providers = {
-# nomad = nomad.yul1
-# }
-#
-# # nomad
-# nomad_datacenters = ["yul1"]
-# nomad_host_volume = "prod-volume-data1-1"
-#
-# # nginx
-# nginx_job_name = "prod-nginx"
-# nginx_use_host_volume = true
-#}
-
-module "prometheus" {
- source = "./prometheus"
- providers = {
- nomad = nomad.yul1
- }
-
- # nomad
- nomad_datacenters = ["yul1"]
- nomad_host_volume = "prod-volume-data1-1"
-
- # prometheus
- prometheus_job_name = "prod-prometheus"
- prometheus_use_canary = true
- prometheus_group_count = 4
- prometheus_vault_secret = {
- use_vault_provider = false,
- vault_kv_policy_name = "kv-secret",
- vault_kv_path = "secret/data/prometheus",
- vault_kv_field_access_key = "access_key",
- vault_kv_field_secret_key = "secret_key"
- }
- prometheus_data_dir = "/data/"
- prometheus_use_host_volume = true
- prometheus_version = "2.28.1"
- prometheus_cpu = 2000
- prometheus_mem = 8192
- prometheus_port = 9090
-}
-
module "vpp_device" {
source = "./vpp_device"
providers = {