devconf-2016-forks / hashiconf-eu-2016

HashiConf EU 2016

HashiConf EU 2016

Prerequisites

Bootstrap the HashiStack on Google Compute Engine

Login into the controller node and checkout this repository.

gcloud compute ssh ns-1

git clone https://github.com/kelseyhightower/hashiconf-eu-2016.git

cd hashiconf-eu-2016

Create the Hashiapp Policy and Token

vault policy-write hashiapp vault/hashiapp-policy.hcl

vault token-create \
  -policy="hashiapp" \
  -display-name="hashiapp"

Edit jobs/hashiapp.nomad job

env {
  VAULT_TOKEN = "HASHIAPP_TOKEN"
  VAULT_ADDR = "http://vault.service.consul:8200"
  HASHIAPP_DB_HOST = "CLOUD_SQL:3306"
}

Create the Hashiapp Secret

vault read mysql/creds/hashiapp

vault write secret/hashiapp jwtsecret=secret

Service Discovery with Consul

nomad plan jobs/consul.nomad

nomad run jobs/consul.nomad

nomad status consul

consul join nc-1 nc-2 nc-3 nc-4 nc-5

consul members

Hashiapp Job

Submit the hashiapp service job.

nomad run jobs/hashiapp.nomad

nomad status hashiapp

Viewing Logs

nomad fs -job hashiapp alloc/logs/hashiapp.stderr.0
nomad fs -job hashiapp alloc/logs/hashiapp.stdout.0

Load Balancing with Fabio

run curl on a private intance

nomad run jobs/fabio.nomad

nomad status fabio

Send Traffic

curl -H "Host: hashiapp.com" http://<loadbalancer-ip>:9999/version

while true; do curl -H "Host: hashiapp.com" http://<loadbalancer-ip>:9999/version; sleep 1; done

Scaling Up

Edit jobs/hashiapp.nomad

count = 5

nomad plan jobs/hashiapp.nomad

nomad run jobs/hashiapp.nomad

Rolling Upgrades

Edit jobs/hashiapp.nomad

source = "https://storage.googleapis.com/hashistack/hashiapp/v2.0.0/hashiapp"
checksum = "sha256:372ddaeb9ac97a2eecd7dd3307bd32f8b0c188d47239f7ef6790609f9a157ca4"

nomad plan jobs/hashiapp.nomad

nomad run jobs/hashiapp.nomad