cluster/nomad/regions/homelab-1/hydra.tf
Magic_RB 3e69bacea5 Make Hydra work under new system
Signed-off-by: Magic_RB <magic_rb@redalder.org>
2022-10-27 11:41:39 +02:00

96 lines
2 KiB
HCL

resource "nomad_volume" "hydra-db" {
type = "csi"
plugin_id = "org.democratic-csi.nfs"
volume_id = "hydra-db"
name = "hydra-db"
external_id = "hydra-db"
capability {
access_mode = "single-node-writer"
attachment_mode = "file-system"
}
context = {
server = "blowhole.hosts.in.redalder.org"
share = "/var/nfs/hydra-db"
node_attach_driver = "nfs"
provisioner_driver = "node-manual"
}
mount_options {
fs_type = "nfs"
mount_flags = [ "nfsvers=3", "hard", "async" ]
}
}
resource "nomad_volume" "hydra-data" {
type = "csi"
plugin_id = "org.democratic-csi.nfs"
volume_id = "hydra-data"
name = "hydra-data"
external_id = "hydra-data"
capability {
access_mode = "single-node-writer"
attachment_mode = "file-system"
}
context = {
server = "blowhole.hosts.in.redalder.org"
share = "/var/nfs/hydra-data"
node_attach_driver = "nfs"
provisioner_driver = "node-manual"
}
mount_options {
fs_type = "nfs"
mount_flags = [ "nfsvers=3", "hard", "async" ]
}
}
resource "nomad_volume" "hydra-nix" {
type = "csi"
plugin_id = "org.democratic-csi.nfs"
volume_id = "hydra-nix"
name = "hydra-nix"
external_id = "hydra-nix"
capability {
access_mode = "single-node-writer"
attachment_mode = "file-system"
}
context = {
server = "blowhole.hosts.in.redalder.org"
share = "/var/nfs/hydra-nix"
node_attach_driver = "nfs"
provisioner_driver = "node-manual"
}
mount_options {
fs_type = "nfs"
mount_flags = [ "nfsvers=3", "hard", "async" ]
}
}
resource "vault_policy" "hydra-policy" {
name = "hydra-policy"
policy = <<EOF
path "kv/data/hydra" {
capabilities = ["read"]
}
EOF
}
resource "nomad_job" "hydra" {
jobspec = file("${path.module}/job/hydra.hcl")
hcl2 {
enabled = true
vars = {
flake_ref = "${var.flake_host}?rev=${var.flake_rev}&ref=${var.flake_ref}"
flake_sha = var.flake_sha
}
}
}