a19f7dbda5
The previous strategy for provisioning infrastructure targets was to use the cheapest instances that could reliably perform as Vault cluster nodes. With this change we introduce a new model for target node infrastructure. We've replaced on-demand instances for a spot fleet. While the spot price fluctuates based on dynamic pricing, capacity, region, instance type, and platform, cost savings for our most common combinations range between 20-70%. This change only includes spot fleet targets for Vault clusters. We'll be updating our Consul backend bidding in another PR. * Create a new `vault_cluster` module that handles installation, configuration, initializing, and unsealing Vault clusters. * Create a `target_ec2_instances` module that can provision a group of instances on-demand. * Create a `target_ec2_spot_fleet` module that can bid on a fleet of spot instances. * Extend every Enos scenario to utilize the spot fleet target acquisition strategy and the `vault_cluster` module. * Update our Enos CI modules to handle both the `aws-nuke` permissions and also the privileges to provision spot fleets. * Only use us-east-1 and us-west-2 in our scenario matrices as costs are lower than us-west-1. Signed-off-by: Ryan Cragun <me@ryan.ec>
135 lines
1.7 KiB
Plaintext
135 lines
1.7 KiB
Plaintext
# Compiled Object files, Static and Dynamic libs (Shared Objects)
|
|
*.o
|
|
*.a
|
|
*.so
|
|
|
|
# Folders
|
|
_obj
|
|
_test
|
|
.cover
|
|
|
|
# Architecture specific extensions/prefixes
|
|
*.[568vq]
|
|
[568vq].out
|
|
|
|
*.cgo1.go
|
|
*.cgo2.c
|
|
_cgo_defun.c
|
|
_cgo_gotypes.go
|
|
_cgo_export.*
|
|
|
|
_testmain.go
|
|
|
|
*.exe
|
|
*.test
|
|
*.prof
|
|
|
|
# Other dirs
|
|
/bin/
|
|
/pkg/
|
|
|
|
# Generated Web UI goes here
|
|
/http/web_ui/*.*
|
|
/http/web_ui/**/*.*
|
|
|
|
# Vault-specific
|
|
example.hcl
|
|
example.vault.d
|
|
|
|
# Without this, the *.[568vq] above ignores this folder.
|
|
!**/graphrbac/1.6
|
|
|
|
# Ruby
|
|
website/vendor
|
|
website/.bundle
|
|
website/build
|
|
website/tmp
|
|
|
|
# Vagrant
|
|
.vagrant/
|
|
Vagrantfile
|
|
|
|
# Configs
|
|
*.hcl
|
|
!.copywrite.hcl
|
|
!.release/ci.hcl
|
|
!.release/security-scan.hcl
|
|
!.release/linux/package/etc/vault.d/vault.hcl
|
|
!command/agent/config/test-fixtures/*.hcl
|
|
!command/server/test-fixtures/**/*.hcl
|
|
!enos/**/*.hcl
|
|
|
|
# Enos
|
|
enos/.enos
|
|
enos/support
|
|
# Enos local Terraform files
|
|
enos/.terraform/*
|
|
enos/.terraform.lock.hcl
|
|
enos/*.tfstate
|
|
enos/*.tfstate.*
|
|
enos/**/.terraform/*
|
|
enos/**/.terraform.lock.hcl
|
|
enos/**/*.tfstate
|
|
enos/**/*.tfstate.*
|
|
|
|
.DS_Store
|
|
.idea
|
|
.vscode
|
|
|
|
dist/*
|
|
|
|
# ignore ctags
|
|
./tags
|
|
|
|
# Editor backups
|
|
*~
|
|
*.sw[a-z]
|
|
|
|
# IntelliJ IDEA project files
|
|
.idea
|
|
*.ipr
|
|
*.iml
|
|
|
|
# compiled output
|
|
ui/dist
|
|
ui/tmp
|
|
ui/root
|
|
|
|
# dependencies
|
|
ui/node_modules
|
|
ui/bower_components
|
|
|
|
# misc
|
|
ui/.DS_Store
|
|
ui/.sass-cache
|
|
ui/connect.lock
|
|
ui/coverage/*
|
|
ui/libpeerconnection.log
|
|
ui/npm-debug.log
|
|
ui/test-reports/*
|
|
ui/testem.log
|
|
|
|
# used for JS acceptance tests
|
|
ui/tests/helpers/vault-keys.js
|
|
ui/vault-ui-integration-server.pid
|
|
|
|
# for building static assets
|
|
node_modules
|
|
|
|
# Website
|
|
website/.bundle
|
|
website/build/
|
|
website/npm-debug.log
|
|
website/vendor
|
|
website/.bundle
|
|
website/.cache
|
|
website/assets/node_modules
|
|
website/assets/public
|
|
website/components/node_modules
|
|
|
|
.buildcache/
|
|
.releaser/
|
|
*.log
|
|
|
|
tools/godoctests/.bin
|