hashipi

commit c37679b5eed3efcb95ff32bf67fe169689c70a6d
parent 4c81785e284aec46e8062009113aa634057385b2
Author: Andreas Gruhler <andreas.gruhler@adfinis.com>
Date:   Sun, 21 Jul 2024 21:34:21 +0200

feat(nomad): retry join

Diffstat:
M
nomad.sh
 | 
7
+++++++
M
openbao.sh
 | 
6
+++---

2 files changed, 10 insertions(+), 3 deletions(-)
diff --git a/nomad.sh b/nomad.sh
@@ -59,6 +59,10 @@ cat << EOF > /etc/nomad.d/server.hcl
 server {
   enabled = true
   bootstrap_expect = 3
+  server_join {
+    retry_join = [ "pi0", "pi2", "pi4" ]
+  }
+
   # https://developer.hashicorp.com/nomad/docs/configuration/server#raft_multiplier
   # https://developer.hashicorp.com/consul/docs/install/performance
   raft_multiplier = 5
@@ -101,6 +105,9 @@ if [[ "$NOMAD_CLIENT" = true ]]; then
 cat << EOF > /etc/nomad.d/client.hcl
 client {
   enabled = true
+  server_join {
+    retry_join = [ "pi0", "pi2", "pi4" ]
+  }
 
   # Allow jobs to use the loopback interface for exposing
   # private services only accessible from the client nodes
diff --git a/openbao.sh b/openbao.sh
@@ -77,21 +77,21 @@ storage "raft" {
   node_id = "$HOSTNAME"
 
   retry_join {
-    leader_api_addr = "https://pi0.lan:8200"
+    leader_api_addr = "https://pi0:8200"
     leader_tls_servername = "vault.in0rdr.ch"
     leader_ca_cert_file = "/opt/openbao/tls/$HOSTNAME.pem"
     leader_client_cert_file = "/opt/openbao/tls/$HOSTNAME.pem"
     leader_client_key_file = "/opt/openbao/tls/$HOSTNAME.key"
   } 
   retry_join {
-    leader_api_addr = "https://pi2.lan:8200"
+    leader_api_addr = "https://pi2:8200"
     leader_tls_servername = "vault.in0rdr.ch"
     leader_ca_cert_file = "/opt/openbao/tls/$HOSTNAME.pem"
     leader_client_cert_file = "/opt/openbao/tls/$HOSTNAME.pem"
     leader_client_key_file = "/opt/openbao/tls/$HOSTNAME.key"
   } 
   retry_join {
-    leader_api_addr = "https://pi4.lan:8200"
+    leader_api_addr = "https://pi4:8200"
     leader_tls_servername = "vault.in0rdr.ch"
     leader_ca_cert_file = "/opt/openbao/tls/$HOSTNAME.pem"
     leader_client_cert_file = "/opt/openbao/tls/$HOSTNAME.pem"