-
Notifications
You must be signed in to change notification settings - Fork 0
Installation skeleton
Murray Resinski edited this page May 21, 2018
·
6 revisions
- Requires an F5 for ingres, may need to make region api capable of supporting nginx ingress as well.
- LDAP isn't required, but if its used you'll need to install corp-auth
- Quay can be replaced with any docker registry that has credentials/protected write access to place gold master images, only tested with quay
- Need to make brokers (twilio, aws rds, papertrail, all of 'em optional)
- Need to make route 53 pluggable with other dns systems(?)
- Need to make digicert pluggable and replacable with lets encrypt.
- Support more than just AWS?... in brokers? and terraforming kube?
- Check Third Party Systems:
- Papertrail log drain
- Twilio account
- AWS account/keys
- DigiCert account/keys
- Quay account/keys
- LDAP service account
- Master credentials for on-prem postgres?
- Github Bot Account / org
- Check Domains/Security:
- Check domain systems (route 53)
- LDAP Elevated access group, normal group, base dn, etc
- Check Network:
- Check elb-ingress-certificate systems
- Check F5 systems (install f5 via virtual edition on AWS?) check perms on existing F5, partitions, etc, ask inside vs. outside VIP)
- Check f5-ingress-certificate systems
- Begin AWS Provisioning
- Create one or two kubernetes (engineering cluster + runtime, or combined?)
- ETCD (EC2)
- Controllers/Workers (EC2)
- Kafka (EC2 or kubrerenetes w/helm? — requires statefulsets — https://github.com/kubernetes/charts/tree/master/incubator/kafka)
- InfluxDB (EC2 or kubernetes w/helm? — https://github.com/kubernetes/charts/tree/master/stable/influxdb)
- MongoDB (EC2 or kubernetes w/helm? — https://github.com/kubernetes/charts/tree/master/stable/mongodb)
- RabbitMQ (EC2 or kubernetes w/helm? — https://github.com/kubernetes/charts/tree/master/stable/rabbitmq)
- Syslog F5/kafka collector (EC2)
- Provision initial alamo-api database (postgres ris)
- Create one or two kubernetes (engineering cluster + runtime, or combined?)
- Service Installations:
- Installation of vault (helm? https://github.com/kubernetes/charts/tree/master/incubator/vault)
- Installation of jenkins build system (helm? https://github.com/kubernetes/charts/tree/master/stable/jenkins)
- Kafkalogs plugin, docker pipeline etc plugin, ec2 slaves
- Installation of jenkins test system (helm? https://github.com/kubernetes/charts/tree/master/stable/jenkins)
- Installation of quay/registry (helm? https://github.com/kubernetes/charts/tree/master/stable/docker-registry)
- Installation of prometheus
- Installation of fluentd + config for kafka (zookeepers)
- Installation of nagios/monitoring/check systems (?) setup on opsgenie?
- Installation of membanks (helm? ) + default dashboards
- Installation of alamo-api
- Terraform RDS DB parameter groups for postgres
- Terraform RDS DB parameter groups for mysql
- Terraform RDS option groups for memcached
- Terraform RDS option groups for redis
- Terraform RDS hobby database
- Installation of postgres aws broker + prepro
- Installation of mysql aws broker + prepro
- Installation of memcached aws broker + prepro
- Installation of redis aws broker + prepro
- Installation of elastic search aws broker
- Installation of mongodb broker
- Installation of rabbitmq broker
- Installation of postgres-on-prem broker
- Installation of s3 aws broker
- Installation of service watcher
- Installation of node watcher
- Run alamo-api tests or any other tests
- Install in-akkeris services:
- Install log shuttle
- Install log session
- Install controller-api
- Install akkeris-api
- Install auth-api
- Install build shuttle
- Install corporate oauth (optional, if using ldap)
- Install site/routes for apps and auth sites
- Reset config or backfill config with sites
- Installation of metrics sampler
- Installation of app watcher
- Installation of self diagnostics
- Installation of cache scanner
- Installation of rabbitmq scanner
- Installation of postgres scanner
- Installation of anomaly/metrics-syslog-collector
- Installation of router scanner
- Run region-api tests, controller-api tests, ui tests