From 4a45188358d62d0c26ad3fb9cca21d4eb38f1ab3 Mon Sep 17 00:00:00 2001 From: Khue Doan Date: Sat, 24 Apr 2021 18:04:26 +0700 Subject: [PATCH] Move tfstate back to etcd --- docs/todo.md | 18 +++++++++--------- infra/terraform.tf | 10 +++++----- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/docs/todo.md b/docs/todo.md index 4dd920f6..edfd5866 100644 --- a/docs/todo.md +++ b/docs/todo.md @@ -1,16 +1,16 @@ # TODO +- [(optimize) DRY master and worker definition](../infra/cluster.tf#L87) +- [(bug) should be posible to put it in the profile instead lxd_profile.kubenode.config](../infra/cluster.tf#L97) - [use ./values/metallb.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L12) -- [upgrade cert-manager helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L37) +- [(optimize) should cert manager be part of bootstrap?](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L33) - [use ./values/cert-manager.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L43) -- [upgrade longhorn helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L64) -- [upgrade vault helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L75) -- [HA Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L81) -- [Auto unseal Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L82) -- [automatic ingress and tunnel for all services](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L85) -- [(optimize) DRY master and worker definition](../infra/platform/cluster.tf#L87) -- [(bug) should be posible to put it in the profile instead lxd_profile.kubenode.config](../infra/platform/cluster.tf#L97) -- [remote backend (etcd or minio)](../infra/platform/terraform.tf#L2) +- [move Vault out of bootstrap](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L80) +- [upgrade vault helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L85) +- [HA Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L91) +- [Auto unseal Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L92) +- [automatic ingress and tunnel for all services](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L95) +- [Generate endpoint automatically (terragrunt for variable)](../infra/terraform.tf#L2) - [convert to YAML for Terraform yamldecode](../metal/hosts.ini#L1) - [Optimize SELinux](../metal/roles/lxd/tasks/main.yml#L1) - [Optimize firewall](../metal/roles/lxd/tasks/main.yml#L6) diff --git a/infra/terraform.tf b/infra/terraform.tf index f1b2dbee..2291388c 100644 --- a/infra/terraform.tf +++ b/infra/terraform.tf @@ -1,9 +1,9 @@ terraform { - # TODO remote backend (etcd or minio) - # backend "etcdv3" { - # endpoints = ["localhost:2379"] - # lock = true - # } + # TODO Generate endpoint automatically (terragrunt for variable) + backend "etcdv3" { + endpoints = ["192.168.1.29:2379"] + lock = true + } required_providers { lxd = {