Skip to content

Latest commit

 

History

History
25 lines (19 loc) · 1.39 KB

packer.md

File metadata and controls

25 lines (19 loc) · 1.39 KB
Raw

Packer

This platform relies on pre-configured instance templates. This approach allows faster and simpler provisioning, as templates are preconfigured, and they ship some helper scripts.

Templates

Each template is based on Ubuntu 22.04 (LTS)

  • exoscale-vault.pkr.hcl (Vault cluster member)
    • Hashicorp Vault is used as a management system for most PKI, IAM, and other secrets for use by the whole infrastructure
  • exoscale-etcd.pkr.hcl (Etcd cluster member):
    • Etcd is used as a data store for the Kubernetes control plane.
    • Vault agent to retrieve and update TLS certificates from the Vault cluster.
    • Helper script to create or join the cluster automatically, based on instance pool members.
  • exoscale-kube-controlplane.pkr.hcl (Kubernetes control plane):
    • Kubernetes control plane components: apiserver, apiserver-network-proxy (aka konnectivity), scheduler, controller-manager.
    • Vault agent to retrieve and update TLS certificates and other secrets from the Vault cluster.
  • exoscale-kube-node.pkr.hcl (Kubernetes node):
    • Kubelet service.
    • kube-proxy is NOT installed because the CNI plugin replaces its features (Cilium is deployed in the cluster in strict kube-proxy replacement mode).

Build instructions

See the initial provisioning runbook for build instructions.