From 84a013d1695a4900cd9dfab479d3c0fd60a6bbf8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?G=C3=B6rz=2C=20Friedrich?= Date: Mon, 13 Jun 2022 16:46:29 +0000 Subject: [PATCH] MOB-148: added k8s cluster for mobene stuff --- create-database.yml | 5 +- group_vars/all/plain.yml | 5 + group_vars/stage_prodwork01/argocd.yml | 238 +++++++++ group_vars/stage_prodwork01/mobene.yml | 500 ++++++++++++++++++ group_vars/stage_prodwork01/plain.yml | 218 ++++++++ group_vars/stage_prodwork01/vault.yml | 467 ++++++++++++++++ hcloud_firewall.yml | 2 + host_vars/prodwork01-postgres-01.yml | 4 + host_vars/prodwork01-postgres-02.yml | 4 + kubernetes.yml | 6 +- mobene.yml | 128 +++++ provisioning.yml | 2 +- roles/confirm_postgres/defaults/main.yml | 8 + roles/confirm_postgres/tasks/main.yml | 18 + roles/kibana/tasks/_configure_spaces.yml | 3 + roles/kubernetes/argocd/defaults/main.yml | 2 + roles/kubernetes/argocd/tasks/main.yml | 17 +- roles/kubernetes/base/tasks/main.yml | 9 + roles/kubernetes/base/tasks/podsecurity.yml | 41 ++ .../ingress_controller/defaults/main.yml | 3 + roles/kubernetes/namespace/defaults/main.yml | 2 +- roles/kubernetes/namespace/tasks/main.yml | 20 + stage-prodwork01 | 53 ++ stage-prodwork01-netgo-hcloud.yml | 26 + tasks/smardigo_management_message.yml | 8 + .../elastic-certs/prodwork01-certs/ca/ca.crt | 20 + .../prodwork01-elastic-stack-elastic-01.crt | 21 + .../prodwork01-elastic-stack-elastic-01.key | 27 + ...dwork01-elastic-stack-elastic-01.pkcs8.key | 28 + .../prodwork01-elastic-stack-elastic-02.crt | 21 + .../prodwork01-elastic-stack-elastic-02.key | 27 + ...dwork01-elastic-stack-elastic-02.pkcs8.key | 28 + .../prodwork01-elastic-stack-elastic-03.crt | 21 + .../prodwork01-elastic-stack-elastic-03.key | 27 + ...dwork01-elastic-stack-elastic-03.pkcs8.key | 28 + .../prodwork01-elastic-stack-filebeat.crt | 21 + .../prodwork01-elastic-stack-filebeat.key | 27 + ...rodwork01-elastic-stack-filebeat.pkcs8.key | 28 + .../prodwork01-elastic-stack-logstash-01.crt | 21 + .../prodwork01-elastic-stack-logstash-01.key | 27 + ...work01-elastic-stack-logstash-01.pkcs8.key | 28 + .../elastic-certs/prodwork01-instances.yaml | 25 + 42 files changed, 2208 insertions(+), 6 deletions(-) create mode 100644 group_vars/stage_prodwork01/argocd.yml create mode 100644 group_vars/stage_prodwork01/mobene.yml create mode 100644 group_vars/stage_prodwork01/plain.yml create mode 100644 group_vars/stage_prodwork01/vault.yml create mode 100644 host_vars/prodwork01-postgres-01.yml create mode 100644 host_vars/prodwork01-postgres-02.yml create mode 100644 mobene.yml create mode 100644 roles/confirm_postgres/defaults/main.yml create mode 100644 roles/confirm_postgres/tasks/main.yml create mode 100644 roles/kubernetes/base/tasks/podsecurity.yml create mode 100644 stage-prodwork01 create mode 100644 stage-prodwork01-netgo-hcloud.yml create mode 100644 templates/elastic-certs/prodwork01-certs/ca/ca.crt create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.crt create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.pkcs8.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.crt create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.pkcs8.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.crt create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.pkcs8.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.crt create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.pkcs8.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.crt create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.key create mode 100644 templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.pkcs8.key create mode 100644 templates/elastic-certs/prodwork01-instances.yaml diff --git a/create-database.yml b/create-database.yml index e0f5b9a..bc25530 100644 --- a/create-database.yml +++ b/create-database.yml @@ -58,7 +58,7 @@ - "{{ item }}" changed_when: False with_items: "{{ cluster_features }}" - when: item in ['connect', 'management_connect', 'keycloak', 'webdav', 'gitea', 'workflow_index', 'workflow_proxy', 'pdns'] + when: item in ['confirm', 'connect', 'management_connect', 'keycloak', 'webdav', 'gitea', 'workflow_index', 'workflow_proxy', 'pdns'] - name: "Add maria servers to hosts if necessary" add_host: @@ -88,6 +88,9 @@ - always roles: + - role: confirm_postgres + when: "'confirm' in group_names" + - role: connect_postgres when: "'connect' in group_names" diff --git a/group_vars/all/plain.yml b/group_vars/all/plain.yml index a21d5db..e3f8909 100644 --- a/group_vars/all/plain.yml +++ b/group_vars/all/plain.yml @@ -216,3 +216,8 @@ selfsigned_ca_private_key_passphrase: '{{ selfsigned_ca_private_key_passphrase_v prometheus_alert_diskspaceusage_warning: 85 prometheus_alert_pg_replication_lag: 120 + +# hetzner upstream DNSservers +upstream_dns_servers: +- 185.12.64.1 +- 185.12.64.2 diff --git a/group_vars/stage_prodwork01/argocd.yml b/group_vars/stage_prodwork01/argocd.yml new file mode 100644 index 0000000..3a0b0ad --- /dev/null +++ b/group_vars/stage_prodwork01/argocd.yml @@ -0,0 +1,238 @@ +k8s_argocd_with_keycloak: False +argocd_server_admin_password: "{{ argocd_server_admin_password_vault }}" + +k8s_argocd_helm__name: "argo-cd" +k8s_argocd_helm__release_namespace: "argo-cd" + +gpg_key_smardigo_automation__private: '{{ gpg_key_smardigo_automation__private__vault }}' + +# https://github.com/argoproj/argo-helm/tree/master/charts/argo-cd +k8s_argocd_helm__release_values: + controller: + logLevel: info + logFormat: json + metrics: + enabled: true + serviceMonitor: + enabled: true + namespace: "{{ k8s_argocd_helm__release_namespace }}" + additionalLabels: + release: prometheus + repoServer: + logLevel: info + logFormat: json + metrics: + enabled: true + serviceMonitor: + enabled: true + namespace: "{{ k8s_argocd_helm__release_namespace }}" + additionalLabels: + release: prometheus + env: + - name: ARGOCD_MAX_CONCURRENT_LOGIN_REQUESTS_COUNT + value: "0" + - name: ARGOCD_EXEC_TIMEOUT + value: "300s" + - name: XDG_CONFIG_HOME + value: /.config + - name: GNUPGHOME + value: /home/argocd/.gnupg + volumes: + - name: custom-tools + emptyDir: {} + - name: gnupg-home + emptyDir: {} + - name: sops-gpg + secret: + secretName: sops-gpg + volumeMounts: + - mountPath: /home/argocd/.gnupg + name: gnupg-home + subPath: .gnupg + - mountPath: /usr/local/bin/kustomize + name: custom-tools + subPath: kustomize + # Verify this matches a XDG_CONFIG_HOME=/.config env variable + - mountPath: /.config/kustomize/plugin/viaduct.ai/v1/ksops/ksops + name: custom-tools + subPath: ksops + initContainers: + - name: 1-install-ksops + image: viaductoss/ksops:v3.0.1 + command: ["/bin/sh", "-c"] + args: + - echo "Installing KSOPS..."; + mv ksops /custom-tools/; + mv $GOPATH/bin/kustomize /custom-tools/; + echo "Done."; + volumeMounts: + - mountPath: /custom-tools + name: custom-tools + - name: 2-import-gpg-key + image: argoproj/argocd:v2.2.5 + command: ["gpg", "--import","/sops-gpg/gpg_key_smardigo_automation__private"] + env: + - name: GNUPGHOME + value: /gnupg-home/.gnupg + volumeMounts: + - mountPath: /sops-gpg + name: sops-gpg + - mountPath: /gnupg-home + name: gnupg-home + server: + logLevel: info + logFormat: json + config: + kustomize.buildOptions: "--enable-alpha-plugins" + rbacConfig: + policy.default: role:readonly + policy.csv: | + g, {{ argo_realm_group }}, role:admin + g, admin, role:admin + metrics: + enabled: true + serviceMonitor: + enabled: true + namespace: "{{ k8s_argocd_helm__release_namespace }}" + additionalLabels: + release: prometheus + service: + sessionAffinity: ClientIP + ingress: + enabled: true + annotations: + cert-manager.io/cluster-issuer: letsencrypt-prod + cert-manager.io/issue-temporary-certificate: "true" + kubernetes.io/ingress.class: nginx + nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}" + nginx.ingress.kubernetes.io/force-ssl-redirect: "false" + nginx.ingress.kubernetes.io/ssl-passthrough: "true" + nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + hosts: + - "{{ k8s_argocd_helm__domain }}" + tls: + - secretName: "{{ stage }}-kube-argocd-cert" + hosts: + - "{{ k8s_argocd_helm__domain }}" + additionalProjects: + - name: infrastructure + namespace: '{{ k8s_argocd_helm__release_namespace }}' + additionalLabels: {} + additionalAnnotations: {} + description: infrastructure applications + sourceRepos: + - '*' + destinations: + - namespace: '*' + server: https://kubernetes.default.svc + clusterResourceWhitelist: + - group: '*' + kind: '*' + orphanedResources: + warn: false + - name: bootstrap + namespace: '{{ k8s_argocd_helm__release_namespace }}' + additionalLabels: {} + additionalAnnotations: {} + description: application declarations for bootstraping k8s cluster with argo-cd + sourceRepos: + - '*' + destinations: + - namespace: '*' + server: https://kubernetes.default.svc + clusterResourceWhitelist: + - group: '*' + kind: '*' + orphanedResources: + warn: false + - name: cus-mobene + namespace: '{{ k8s_argocd_helm__release_namespace }}' + additionalLabels: {} + additionalAnnotations: {} + description: application declarations for customer mobene + sourceRepos: + - '*' + destinations: + # TODO all applications have to be in argo-cd namespace + - namespace: 'argo-cd' + server: https://kubernetes.default.svc + - namespace: 'cus-mobene' + server: https://kubernetes.default.svc + - namespace: 'cus-mobene-nsodev' + server: https://kubernetes.default.svc + - namespace: 'cus-mobene-cusqa' + server: https://kubernetes.default.svc + - namespace: 'cus-mobene-cusprod' + server: https://kubernetes.default.svc + clusterResourceWhitelist: + - group: '*' + kind: '*' + orphanedResources: + warn: false + additionalApplications: + - + name: keycloak + namespace: '{{ k8s_argocd_helm__release_namespace }}' + destination: + namespace: sma-ums + server: https://kubernetes.default.svc + project: bootstrap + source: + path: config/kustomize/prodwork01 + repoURL: https://{{ shared_service_gitea_hostname }}/argocd/k8s_keycloak.git + targetRevision: prod + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true + - + name: filebeat + namespace: '{{ k8s_argocd_helm__release_namespace }}' + destination: + namespace: kube-system + server: https://kubernetes.default.svc + project: bootstrap + source: + path: config/prodwork01 + repoURL: https://{{ shared_service_gitea_hostname }}/argocd/kube-system-filebeat.git + targetRevision: main + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true + - + name: cus-mobene + namespace: '{{ k8s_argocd_helm__release_namespace }}' + destination: + namespace: cus-mobene + server: https://kubernetes.default.svc + project: cus-mobene + source: + path: config/default + repoURL: https://{{ shared_service_gitea_hostname }}/argocd/smardigo-mobene.git + targetRevision: main + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true + redis: + metrics: + enabled: true + serviceMonitor: + enabled: true + namespace: "{{ k8s_argocd_helm__release_namespace }}" + additionalLabels: + release: "{{ k8s_prometheus_helm__name }}" + dex: + enabled: false + applicationSet: + enabled: false + configs: + secret: + argocdServerAdminPassword: '{{ argocd_server_admin_password | password_hash("bcrypt") }}' diff --git a/group_vars/stage_prodwork01/mobene.yml b/group_vars/stage_prodwork01/mobene.yml new file mode 100644 index 0000000..cb34bdf --- /dev/null +++ b/group_vars/stage_prodwork01/mobene.yml @@ -0,0 +1,500 @@ +$ANSIBLE_VAULT;1.1;AES256 +38393035306261346134383162356566326337666661653966396532303666663037663163396466 +3931326461323966316431316163323061636163653863390a643866376430356463303565366230 +37626438636366626162643833613035373532663530306461383932666638356633613166356363 +3234313739323864610a316136343030343464663066616632633561373730353334383337343439 +33346364376339316535633261323465646661626337383166353936393964333738613736303434 +64316237623236346631623333383835313866323035623364623531306335653334626339366636 +38303535313965613464383534636435646261356231353339653436323639336532383862363162 +35383535633665613464613238653330643666616436643130663666663631313762313733363064 +35316665366136356264666336376361336565313632386663383438626633633763643066636266 +62396435343236373963393565363165353566613830336639366433313635633736366637346236 +30643262656132313130306534366131363138396565366462306236366561346632373837323332 +35653561326530656438633836393133376435643430363633663866633364653034666232663034 +30363862653536306634366237383135636466363231633462363538363465323037333036326335 +66363964326563336135633266333732656130343336306534313334616134346661633133366262 +38326637613730616439316265666335363239616630363234363261636564383539343662393961 +39643338643066663663383736333062363436373962623538356236396364333064336164303033 +33313434643835616362366363346438326533393766393235353835346238316537343666373839 +32616631333236663162323363643333323535386230666166336365343262633362613961653930 +34656330323763373461346464663166343833613066353232633030623130393036383162306562 +66633139303861343965373463303261633633643665636262323461353134643765393930346431 +36353364616533313064613731336438386562626164656263356635303634336434346564626535 +62333132636433396565643836643762663762373637353739333631623434656463643739646633 +31386630663861303934323162363138316266663936386333373730336534653631366261333733 +34373437393964363131653630616330616431643362333431656135386632613034616635663366 +30623536333834353731373831353161343564373239623861656364646238363131386561643031 +32616234616133346637656161326337346163313131323735376362353363353261323239376264 +61626265373766633836643131323135356338353762363039306638346432333162373436343761 +65303437653134626365383562343639343231343265666637343163663232663535346564623661 +34303931343666643966316437306339663466323865386562626266343133356331346665623866 +31653364366662646666316161623237383431326335306661323536663637633938343736346434 +35373738303335376637623466336666346632343938336264663062653833366638303563396166 +33333065643935343964303734303465366465343832316365303231356337306132316563646264 +30363161363739323465646466393435636539663630323634633034336265333064356231356563 +62396236363337633230663634353566653230386366396331343262653762626666363932326333 +34343866353831616232336335663861623864613164333864323938353636366133663365656431 +66373162656434333236376337313830653035663738623564373961636337343637303631643436 +30396138396266663364346337373637623763653539376430613431396535313632313235666339 +39333765326536343034363464366239383935636464373232346239383631353666356533346331 +39663238663431653036656535613131636262663536363332663234363066383262623731386235 +36316133623566633836393630643966343261393532653835386437373937303631643635326337 +31663566316530313238626330383532653334383236346337333534613431646466633832313765 +63613937613537663137663935393337666333346466353466613138333861663064626434643637 +64666361373936393434346463366635613031623263343739303765306539363133353836396435 +64396464303139613736396361343231643937643861663163613736303466306432323762333865 +33383665663037303634376530343630646135623237643865653934313864363936316536303163 +65663964656632333764656464323837623138633964336435663133646234343037313065643531 +35643739653238363064613636373032646337363865306139643437373564303238623431643035 +66303561306333373534303630633461656265333231303731613634613533643264613830343733 +32643564376333363962396436313533666339373662343365653930643131313566623735623863 +33383837316433366562663966353261363639306435313261636165316566393964316438303761 +39386264323562646230616137366164663465363961613863386533376266303538316238373663 +66326438356464633065373139306630626165323664346165326136346335613935393632383164 +64326431656233313036346463303136653237623236383930353033636536653338613033623738 +64366431613363626563376331313736373762373863323563396335336631623732323330656566 +38643636653466616162643264643934373739383263646538323039636537393934626265653930 +39376262653533306163353663303635396666666337663337623039643464383965643234396635 +61613931326633656637363132396563613739323362393538373636373731376231303734633835 +30336538616632333539663932646465633039396133366136323637316163656136646339323266 +65626239666538313231323336386662633134353235663132616265646166666239636338356263 +61303437353930616437633465666534656434303530393766393932353235333532373339373834 +35303631373634636437396633626530316461323863356362356165316533656536623931656563 +61333330623439376137336464333561343961303835323632396265346533336532616135653731 +34396561343562303438376533623738383334646439636634383431316661306435633161666363 +39306336363464646137626165386665633738613932643563656463383031323039396331326266 +66396365346331303436353565616532323637363563653636643934303962386435653533373030 +65323531363830326262376236636236646163656139363430656534336332353262623330643631 +36646539383536393664653932666534653761353966373031656363366138386539326135383234 +32346163366432373163373437323039656161663238326563313530656566343138653238643564 +38396234336332653861623038306663363630623139303736306131643465653237316266336461 +39303932313663383965333434666362373763653637353064316661643939316431386561616238 +64393938306236323736313131616132393631663761623935643065633432306237346261313631 +61656230306236353964363035623961373638333131653562326163303633396539343461383065 +33343237343866393561653834363261353039643032633964373931666461653730613233666334 +30333734383536336635393461626130353735653566633435613332376637383031643935633736 +64353063386230393539643534643932326336343239323564356330323034626233623136383462 +63613066376638643030336463613836313135613732336334613337636161643936333632393065 +65616262343062316465386633636661616331343434386461393936666661636366383663376633 +65636332613937353262653766663239346334666336323164363734653961303262313662336165 +34646162303934643834663261373833666666383031633333613064306466626263646639623132 +39643737343461633536636331393135303132666431396565346530383731643365613461336664 +37373665396532353466663537333833643835383263316430306665323366353830396137343561 +37313032343866633635636135326566666566323436376234336364323330303033323230646635 +38356664316139383233633134396631346232366639316330313436306337306665663534303362 +37356235616465356532383337333530383466346638626563653138626538383761633261363266 +39646264386537656264343766313137313163363732336137313061366336373062333336363062 +35643632343264343530376135346530666531623261393133623435316366313465343561636535 +62646132366139653462656233363834363262646663646463666530383361646461633562616564 +35643632376237656364646662343866663131333266306639623538356361653635316564616239 +64613031353236663136303763653634323562343164353636313938626139366466653665383830 +65376335396531613166303130366437386166363034336337343833643037343835643230636536 +37343330373535633233383139356437383465653561616161653838353364643264643365313964 +34656261663962323639616166623561316130336562323333303665646230653537626435333537 +37393965303265373437623531396534323162633661613132633339316337376234333666363738 +65386632613965343534373733346535303461363130653665396263386337303534643461616465 +34613636366231303930326266663261623161373634306263376332653136636332306532346639 +64626666363634346639653835386366383138396665653234333539323536316664613332323161 +33396463303330333031623938353533373939346535393961366139613634363738366138356437 +30633733623564633134383366323161613064666238316565626362353935643363616338393562 +35383939306666373438663837383137316263313665666637376530383065356638386636343863 +61303635663434393538323639656132623562373062303030303030366636393261333865313636 +39646136313866313830346630643133656561356162616635366236396136373538306335373533 +66393034623535386537626636336531376138326232386238326635326638353734646563376665 +38386534643063313565363364393766383635376132613736323165326131396364346665323765 +61343137663365363365333534623338643263383733636661376632623938636132356231666537 +64353134613862323531353066333635613133656465326230346162303031386561666664343631 +65316531613863363735393664656536623236636465643737323939633839633833393364376138 +63363437653663633135653838323962626361663163326661616439653934666238613930386265 +38383732626333393235623638383764396665653230636431633361663531383561326562313133 +33626338376464636534346166626464363566343936323436333938653335396563363930336533 +61366461656434353532613363303438376639653935373266386465663434346635303563333435 +37656263376435333038333233646638396436663432303563323236393330616131643662653733 +34376639353939393838383435663934333064633132373363373065643939336633633461336631 +37343361306531336362643735343931613865346664323433656631363335643330353437343733 +36383130336233326335366132643534373764353930376530313934356530303632613539326665 +63663330346262376333613431613334656466393436353132373030333636363234363462623866 +33643136633437376364313539373736363962633938306663303564363836373031623133343832 +66636366366632666566353564633838393262353166323464383331366162633561623939373766 +30663034396539333236393130613534336238333761343164636231306661626264316331353432 +32366263363137313961363337626335366265663263303361396336333034346632353136386165 +30336564643335633264383362396230306635336362363464633631386265303562386261353066 +36303634333336373761343963353733633632633962393336306663633862613134396463656237 +64363464383337663133383965316232666561323864386331636232396138656364613062303266 +62303236313863346662336161306264336266636431623238306530636164313866313939346265 +36613564336263313938333030633431663564336438326438643333313865343738303637333436 +33633239346563323764386639313737383736316134643662396433353338663936633931313430 +37363733616534363264333437356635303935643431633335633538623631326465383864303237 +31353663306366653333623566663266663130623130393665363834643561653961346464333264 +61363631636436393236666362613130663037306330636363623436353861316363666364383264 +66383435353239376331393937343235366562343433306666306365646330396133313035323165 +32373831306337373236346361636465356363626138356161366466373734653465663230356532 +31376663313232333662346530396639363334353330333830356235303430646539316366323863 +33336436343066383564376132326531376266373730323535303066633532303663663638396630 +66653235643937383366633764653234353236623133346530326433303534363963356436353565 +35303332316464343866323361316438303538643935373263663131643237396463323137326466 +38313162653863303365363235623537356530393531633862356465326436663763316436313434 +63623763393532653934346264313039366461643238313336613639646665353030313830623435 +35376533613837343032623431343564343564343637343862656137396333356364363435346662 +38396534666663626131633835613637383434616431303833653334386435616463636562366164 +64333166616334336365376666303162386630653233656337336436653365306636656233393037 +38343161376466656563646463363664623363303035613661323361326635393232646430313534 +35303663323662373134633162646436636233333464393639343034616364323862366139303336 +35636533393137333632633262376263616338323638616164313838363865656164663861366431 +65343230343564656533616334656234306432353166323564653131306434376134303632386138 +30336131353437643663633864303439316232373861376565396664636266613966653334343732 +62623861643038623234393431333434363330346536303733643534643666393933353335613664 +37666537633061343035343731336665633330303930326263313231356238313964663134656338 +63653731333861666231666131643031346238373038373833613036623463396362336564633465 +31343565636236613432626237636433633830393934343662303232383431663764356634626230 +37326439646132376230363266633437396161313566316562626332326132323334636339343534 +35303561666239643434366637306165323463653264646462666636323361653635363834663464 +35323961383066376430613130313863303338333562396663623361353235336533313630373535 +65303863613932636164383764366330396431626138323966376234636265663734616336383334 +39376436643362343262616230326366303634626131646564343364386139626463623765653934 +66663930323137663061383539663738646334313138363861396337663366663361323833356231 +39376165333133626337303663303763366331306533666135313134646466343166383435663837 +38626136653430336266343339386238336635656266353866613831376561333832363936653138 +38323131373338313065336166393832343236343135623635353966643733613339323934376638 +30666430383066373930613237313239356564303061313430393032393933343561646635393465 +31353666623236613139346436613238396462636335363434393837303464333166353761333437 +31393438373063336161633032623430663539376334373066626163316635346666636136396264 +64343236343738636137613933373739396636396366626463613530646434646466633830393334 +66633435313732643831356639663961316266636535383735353131653834656433326561383934 +63366639356264626232373634626130613035633432356534316432653262626637636665346639 +30393936623762343663316237613465323565656336363264353363633662363165626539363238 +61313461323835336531316231616135363635303566616663613531623730323933623462333034 +63376435346465616661303662636265346465663065333263373530303234356134643238323864 +65613765323165333062386661303863373437633463353231333061396234623935323135383434 +33383533613530653235343565303562656165663237336162613935633061376236646564306665 +39653030373938653566393933313832343738383232666631613137356165306664383937346261 +62653565386337373966666438303566613065373737383937303031626266643933346335303234 +65363463393562316237663130383665613635393235383830656462353139646332663835313739 +30373535306265623230626137376561623063663037626439363834303531343839376130346233 +31663266666132333366366634333964366563623261633938653564366666326666333565613635 +61613135373466626465646637636666643363613432353165613834626561326433643863383966 +37366633363565656632333262363764363338613063636461663063353634373131636232656339 +37623030656562316464656464343337316138366336376436393830356434333731313366313435 +35366163366161633965363263626362366163396132383939613463373139306634386162366231 +62353563383466363833326264613731376464356336643066616562323732326630396665313364 +31346639333561376564353437323765336132373139663262373263373264633465666631366139 +63376466613466623131393038623039396330313333663939623663313762653561386530303165 +66333565653938353135353530326132643564336532626433633535653039306332633731366635 +63613738353163613535306464303336396165306638366561633833356365363432383163646166 +35613465653535656632666565636433666261313938373537623936336562653732376434636636 +65633761623939666138353964616537363837643263386666613163303039613737633265373265 +36663736636134623431316264383430643331333839306132643631643934303464303762336637 +32393263383833373865323439373837623035393633393131666664323566313633653233343361 +31616466366564303662396561646364313334356136333332343931653132383130333365663762 +38363336346664353766346665343962336139306432616536323336356431356662353164373436 +66613463326639316361336530373337303564313139323061363136353464336665396334646333 +39383937623839643539316139613663373832393139386231333164373961633834623635363735 +64616366303739363366653934396535633361626138383633633862633964306132316333666530 +66623135643033393538626639623737323331363664663563646464326439636335343037653165 +63646261303764396266346362616561393738386136643866316630373538646331643837303930 +31646538313961363064336166396166383938643335653862383166323532353461666461383737 +33653337353637393934333566356261323937336336653830666164373262343065333261313936 +30333362316137613962613666313938653533633833323564366332323866366635616166623762 +66326235313630663162333038623765633235636565303166373337383138666334363334386663 +32326333383132373966663530663130373263343662616237323435343566636230626639366163 +37313237386663653636643031303464386336306439633866306363353739333733663563663937 +64363062396565346230633331333039306466616264306630333032323566366431346632643263 +39323734393031326666313861663439383664343534306639616165313065613163393632323937 +34313939653038316436626139663566643837663838633866616637356231666161393263396161 +39386433313730323237653637623839303732366531383637643832633234313866333633303563 +34336334393630313862623536303035663532343137316266323931353462346634613464343761 +36396166353739313664666535306233623831313630396231396638623838373736623764643939 +32333838386535633039326462386535386637376437653138353834383266313432336332633034 +38633061376439383163356237316639653230323634383238333539396435613661626139643938 +64313132326633303266613138636436616337363263626438343832623064363634646636333131 +37306636333362363230356661363935623032313533313366663764636364363834373236653665 +34396266396334336435336637666631616166646164383032383861383464353531356439646331 +33633365663836663634636666393636373831343831323166316636363365393036396538646533 +66396438613266373266363035363338613130323734336538663564646537626662616135346334 +31656439343133643563653866393033636139623265333435373538373136343264666433623232 +63383738353736383530303561626439633634646239326436613937363038353030343239363062 +63643739626365653832643934623366373936343139363730633434303662316637616165666538 +39633563366365346439353130613937326530626231656638666561613933393338313266343961 +36303033376361663339363430653965623566326632636637373830366663643039363863396164 +61323765353263383862616238376135643235656130666564663065616538636335643939393862 +62363330383632666561333634666437306230333362356438363964376465383335383138656435 +35393139623262346162666364313434633061656539623931636636353364346361396134623737 +37643130663031616637633137373130376139666434316364393132666532666339643439636330 +64626639376338656333623132663335326132303065323865313132363136343434383734356564 +66633137623266633932303730393637613538333932306535623065353034373733346138386338 +31323435613139313162613635303337313732376535376131393735366334656465373831343865 +63626531653130396239636166363763383665353037376236333962306238353531646265373335 +61663439616436316563643533643165656262646162343462353966623734663031623636393235 +35646435633138363131376664373663396239626132343165393061366366343732653734343938 +35643465663835656434633862343861323431323164366665643832326263356334393366303337 +33393136326563353735343336616338343165663532623036656666353432373237356334326339 +35313732313135303963663733313261613236313732353262346266333566306262316437623666 +65306532383565313337386661323332613164313664323639383331663534616130616361633334 +31306432373363643733363038666233366333373432313336316636363966633739373838663537 +64386463626561363563393864613935306434653934386531323330373562616130613263633734 +66663539633732343665373534323438356232356238343434613163383233643163616138663336 +34626531656566383764663262363736306165333536633265353133333363363935353031356262 +63646530316162336232316333636634666165393865353462653338333834383764333539363231 +64623731333063656665623466633834313030333964643138623837666232626365623035346333 +30386233376662306539376631373234323233303633313462343564356430303432333864613731 +33386534633163386330376233313739633336373735383238643834643666633363653063386464 +39373133613633306537636332393236613231363466626662613537386530666665366263333366 +32653266363964643862386634313230323661373366366236376136656231366432623732623965 +63396232663439366261633165383161336431393866363238333137313361613736623936356164 +32623531353062343732356461616138393163306661336165396162636263666638643535306334 +62326130313034366431636130346134343039613637376162306431623163343263333432363561 +62623733386464363736663061653332366434643838363231396535623337663439623265623339 +66643731393137623163633633613431323136373865306537356565616530373366646134363733 +37343339393636386361643230336634636137366130333163663236623063376535326166336135 +64353163633137373761663365613138656638656132376563623334646639316432363765656434 +30353465353537393439353636326537636133653132626537353665356235376533653733363538 +30363636323831346663356161373032613430643833363762373662306334323933323262653539 +66376632313430663365666534383565636663363033373039356430336363323065396664323461 +31616137346530663163613239346363393730663564636261316335333431666664633338356562 +31323431376238326265616265336461323037376636613064343836666262626132373539636539 +31613263653665396161353738393161653163613939613963306234643339373134646565396335 +31336333636639336663663966383662326661303631646165326662383330306430353136383463 +30316634316162663430343037393236656332313134343134383262396265316634396531643738 +30666333383633396361323765323961636565306338653530356237626138663765306466333836 +33653762306163356163613163376164386633306635353439626166363331393535623434326464 +63303130316432363265613031303738643566633230383436313661353565616235323966646635 +37613965353432303966623234643363373135346364623335663633646232366532613135636430 +36346335366635656635336538386238366533656562623732623865383639353737343266363662 +31343038313730643464336239613966333934633936626662316131633738383237346232666635 +32386434343561343864623361616334616463316163333962386237633337346633626163646534 +32613034333433343236626133353265363962613861656532366537613837366332316531303362 +30326639636437376163346664323661656530646238633861666437656366356564666566656235 +62326536393963353733353336613839643431336134636664396462383763363237666533636165 +39363636363736313764633761326165316131303539373536386139383666633338633235623535 +39333731613330343130333663316530396630316339346332313131643531643032633235316638 +31383530366539316634656139303133383036383232323134663963386538636262343939353837 +39393666326264616434623462353561643938333433626531393466663230356531613635653434 +34353533653034343831383030653331326135333634373037353666623031383538376535353762 +38336262303665353038633638306638616364326564333239643437616531363663323235353935 +63373739316264653239326236333562656537376332333135663163636335643835356233636330 +33646330333632633939326534616163386264643630316333623134383736666432653835313965 +61366565373133633039343938306166636264383564353262343066613933363365323233666233 +36313234343865666634656362626466313631663237343463386265333338656531326665653235 +39393264663832363830346434386465636561323935633639383634633161643733663431363637 +36623738336136383365316334313835363333656465353065653131666537623866646336643166 +35373030646165383739326563383236353863376437323335613862626336623230626439613465 +35616633376135316464613765333132623761323161643639333731326535316663346562613733 +37656336383664326338316137333639393061386462646336303936643736663339663932626365 +30396465663938333336363461393636343435336536356664613734633135366666623861643064 +62396666666233366663326161353065636535366561666362653937306538623762353963613634 +65373364666363616263383166366130316339373338313231383637343238313731333735633031 +35646336633464613133613832343339636338376432646336343463323839313336393139636663 +35363931653165316330616336646230646166303966363634636637383736656439323032383132 +36626562363236663431353733626464643230343636326237323038393130613337376264386161 +63393563636532353833366539376539373837386566366261346338393964646264396232386439 +36333436646634666539643036616530613964616238326262383530386430373765363161346461 +64386365376131363139613334356138316533626366666137316166383636623963316662333464 +39613133366232656230623538343163323763333931303133656363666362376239633938663230 +34393032393631313937386336313065656638306237353435336332646163343330326332393136 +30363038386566613938346262656630653365383639343330353762306539636263393137363366 +30393136343032316164663631386163393639353937346637303565643665653038653664346466 +66303762623837336538313130396638333238653737643439383662396239313338386132613835 +38346336316635623030633863633431303462663563306632323930633731623937663761623335 +66353733633236613432353031353462356163343364393563373236386338393736346438383865 +62343735393861393463363064643337326136346664396430313839616438333337616236666136 +37626636346163666639346435373036333962326137646139336530393436633335306235626132 +33313930313531643931333331343664346131663433313834333033396361653064396439346262 +34616635366237376434633937653865616136653463646339646137363365313530663033316464 +37613133383861366164373464326335386432653563663562316635353533626562393532616631 +38666338643135343735346232656561313638656537393231383635343262643530353438376566 +63613062396234313639393863633765393966383838326562643539316336653937643238356633 +61366235313964346262383365313366383564613732383064393665386133323538353032613662 +65376637646263306431376235336163373931336635343633333432383832393932323463366363 +39393830666161613939626237666361323362356332396332393765643964336433356261363930 +34643131316437303634653565386633656362636663336263373362366265646133366561353433 +34616562353030373535326265353537363438353930636135303037333566363030343935303134 +32316231363538633662666337343564373465623739303839373139313734343831333164303439 +39326433643861393330643530636530356531363331663934646332623535393066323639643038 +61623664363966396536643330653636633733333536646666386135663739373538336262666661 +33643161623132623632373363353536303762613361666361303164383363306533323539626239 +66643133343864626634363062373365333238326265376330643932313533666564616266343730 +32646637316364373433373236646334333964353664653133616233663062333864353636633063 +66643464636466333635316635333865643635646331343438623734613865663338316336386536 +37633337313266303461653661356564333861373732613730653036636331303462376363663737 +36633438393034643932626533643330363765336537333562643035333866396539636234386663 +33313632323737313536366133356635323631636131306335616137643435363433653633323264 +39633839376366623466643838393334663565303632343433623562323834326132613665373162 +66313061303465613062353238623962303132636231616530633832303634346335313566363964 +34323866653862306261626531383363313438616265313532613965613139663262336135656631 +32393662323661633233326164363131303163393463366533373334633864633862663463343832 +34316261396533663733346437623837313538653236646162383161346261346563383534356561 +34663336376465303561666232353232333234373163333635376237613234623836323035393461 +36643634303337633033633730396262376164633639353963333034633962636637313538623262 +33613461353331336430376537623839323764633666306236356538326164323737633865613663 +66393132363562653666303134643263653165333939383831336232393838303966613133346135 +30376464373431303963383832663364316130366531373637653834643437313637656662343834 +32623932626164323239313132383562383933353430353330316434643865346662633864363335 +35633163333236343137636534313964666463656663333232303639336163386336633764386431 +61313566303131633162333539376333376563343436323362623661343164346562353234306138 +30343937353331623436356234323430386262636635346131366462363334636661303962646364 +62613066346163363766646531323239636136386664636562393564643261326263386138376661 +62323261393264383136366330353435623139616432333061323430616462313034356232323664 +61623532643330653530323735636532356335303637626139303464663734613233653037343533 +30616237363163613838393262386236323565646636353563373339333534373833613762326132 +34346230303032366339306430346437326536303139396238383165326530613061643563343265 +32326534346631303062313465633232343465393937303262366131633839346465613233333436 +36626663356461326338616637656336383332353665396133383666343664333535653634333037 +36323138613438626530313565313733613166373563386132663639323539393366623338323663 +38636137663732353739393136313338663764313338396634343332306430333831353235626565 +64663938643964623439376261346665653062613735663431653233373037646132636262346561 +37333962323231363466636532303639643031653733663464336433646163316637653430386339 +37373037633564353563633762303263623634376238306361636263373462626431383730626631 +62303438613437336462373437643631373039653534346265326266666632356237306538396634 +30353033393163636239393663303431333335343436323563656239396132626136373961613435 +66633539643638363734616162393934643061323261333962386531323933353463333433643932 +33656563333761653662373335613839356634333532303633386237366234613138623965306335 +38376635633332376137643366356339623561336361656563356265343133343034633536383035 +62653864366330616365623930363666356634333461373235303364326264666362333462626137 +35396436333533343138343239363435613061313065613838383966373939643836653062303965 +66623634316131333735666432343830313937323864663330643436616537623132376162633837 +65626631653962343166303338646138666564653261633631363531353263386337613836363064 +30396635626566623235643063313735656534646533333836633933633235383163313166613635 +38616531376534363562316665643764313830346336613530343632386133343039643064633764 +61336133366232383539653466386665373666356131623165616166393536333935326631343862 +38653938336464376639636664363034646134313762613930666261363332623837366630376230 +32313963373738323639646661306235666437306330633465393234613339313064346661386661 +38613437303936343537613163393837643166343636326335656536396335656564366437623535 +66666332323161373430333735336230396234326230303336366561613965633163336336643266 +66633766353831626439643161393835643636653564613238323333636265643564366237353335 +39656262656237353864653338663334303436323066373839663365626563383066363634396238 +31376662663066303364323639633634633136653134653666623234653239373064653262646130 +34366565366666323037633738303237363465333232346536363466326238373136393363343166 +65626466336639386139323166616336346537353862376536643562636662643531353165386133 +37376332343333326366303761346639393261323534643965376564353032663861353437313330 +63633961653730333863633034613338666335306261333762333132393236353331633338356539 +39306533336265646133373065643238386538313238303830643837386137316461323363666433 +33633562346465373463383264613163643630363862376566613035643961343232333331613938 +34643662353965336364656531303839313266663061356338333963323661376464623134356530 +66383732643265643366623265633331366135623934383133303938373131326163643761336135 +34626466346634666164393038663736616234303362343065636239356531616534636161653364 +62656631666534333739303231633862303330333165353736316366636461623932623138633564 +35626165656234626666666330323837383433613266656236643731386333616636623733613831 +33326262613161356638346664393230353635396234363033656632346434386261346262626335 +61323265303737386563353335633131336230336266353932333761306435616362343335613939 +33373431633261373135356337393838626661656433643338623361643362366561306338343336 +38376466613034366633373233326562373832343232636362313630323861363034393362396165 +31356539656462376530373362333263343561383834643265383261376233323534366133323762 +32383038333038386433366334346431333435643064663566356266623237393533626431623361 +30306534366530363865303039643032353731343334303435363639326632626239633062633562 +38323539633932323332646463396165633333393738663730396237373864396634643035333734 +66366237623330663335653162373634613565633033663566643964373436313533656566313934 +32613736366235396237326233393532653433616563633364656365303364623931613561626238 +37306537373330366231613231353835303834643066666132343332613361656365626432636263 +64636237353766663833366339316631343939626137633138616335633139336438303038306339 +35623666353939316539346333366631626433303332356465656330323964336463373737303638 +34356464303437656364326266623134346237643061623365346361363564366134323164353835 +65396232363931316339393737616264333765323432383833383065333838343331363934666334 +64333164376430343734373362376130613433323465653132313665666365306663323166306239 +31333961613839646466626663356235383361656462393238346566646637323438326335386165 +35363631333332663332363434366530616134663663346537346434343666636336646665663438 +39396235333434613932313539313833333666353366336263653137366363666530303632323865 +61636261353564396230623261613965353530326533336634393338393438343863396266396234 +36653731663035373466346131633038666165616633623566383336366264613061353934653737 +31383734636231633335373465633236373236633133316364656462396566653539656130306133 +33363266653766656530376433393738313331316565653930646266386262383431663236323161 +34666633653064303835313864343736653738356333346164653433613333336434663666656235 +32663131346435383037653335373061633437353464306164623938613737366337373133643336 +33363335356134303561303763323635666637653639636435303162366562326337666139396463 +38623531363136363132613630373036633431393433626432326439376565323634653531383036 +33333030663032306132383661316661633463633163616266343335363061363434376436356339 +36623834613663393566326132336361663330333836613633663239306636613032613039633763 +30303530313539666137396332303437393735333037663461313863666235623039323638396138 +63353264386530646231326530633562353737653762393538363232653439653264363162383362 +61316564353733653463306564333931306462373037346338363863333736363532623932343262 +36653365373438666530313162386338646338633364396636663137336338633735396636633034 +34356638363633343537623565353562643335613361643737356264363535363662373032613865 +65666335343163373134376233316331343336383334613130373739343161663361323039353330 +39663939386431383134383263656434303464313639663438663237666463643063383130616564 +32313266393831396130363664336438623939633261613138626135643739346165363336653637 +30396461643131656135353131636462376365333564386563356230393939316530623134653336 +61306363396334633035383962306262633836336165653639356266323434636634363932336634 +32656462306665393031373539316531353733306134636363383237653261633265363339646631 +61643764643235666339353963623630666339623365363939613639343262306666653033343064 +62383264393762666165333937663164643861303661396264363333376635353834303266313533 +31323132343333303630653033396563303938386332393732323736666337306233653136626662 +63333435616239343662366530353566666231663232626266356536303137303464643464646465 +33363461393064666564323761346334643134643933373739333863373964336536303766663932 +61346132333261343661393138623939626236376230396131626665636562623739356433663165 +38616265316538656363353933383762623761323564376465376533666136363931613035613137 +65373034383236376531616162313566656634323564633639316330373362313034646431323738 +61653331616536623538313830383533643361356435643861383533376436366431313032306664 +36373038336439343666303536336264353838383530663132653434373132333130643035616134 +30383530626337393030613734383231326566646166336166393134333965373563313430326463 +64656239366437323261663563653265343862303462653362313435303263663631333964336534 +63386133386639353666633765636161636538343432633133616162356438656162393565323636 +37633137316239363464353732333765353831646364653466366437323633656262313930626639 +32346536343432343837373635363263313032656333633631613461393366326566386436353837 +62323331396636653432303734643966623162353336346362343862353537613764323265663164 +34303138383237623234353364373030353261663237656431653637653861343532396165366136 +38366138353936306132343765656163663863363561336430373736623538396135313039616538 +62323363336539623433366661393936346161353366366235326635383764333666613135626339 +66643561396663656562336665353135616563393361646332666632616336373061316532616465 +34323966353031613631363734316230633266383638356239383262343136663030623830343263 +62666339626135396338613033343562623737386363333566313466333432626433303339613433 +62393530653536633333326335353831356439386537383039623965336262383431616239623230 +63326430326533643834383233626539396236306339616262383631363765626632396630663763 +38306330323663636136626534643637303066643866393033336436636563613964343835643633 +32353263376333303537616363643630386632646537613063633162663637356131313436613431 +62306133383333666532636437306264363961663261643133386530623564313366363237626137 +33306635386564643562353466343136303130663234653938653539306134336363393430613635 +65346263323734323234653832333066303236396634366361336630306231386431306438333264 +64643030613739626363663064343066363634656233313232383564363166343766313961336635 +61353361653330333239343761663764353731613938643138396337326330303939646233316136 +33623561613366656532353932313835323339373565633864333538333036303566393537366134 +31353737376439386130643066353364356363626566626537343038643465613734326237656535 +66376365656433666164353836393230633864326535363239666530663061306161326361343532 +64633366323539316532633839343066643934613363373530613463656366346138666131333236 +32653636663463633632666234386139633461336539326261626463613633656665653334663162 +36643231613333323232373639623334303033326533313663613739363730353863353934336637 +63326634343332383939356562373636646535666432646664313266353532663637613539643364 +33623463333536613566333136646339663761643066303736643239663439323439626534306439 +32356338363163343463646565613539356562356566383861353033383961613233663635666139 +64333231623030313161393264316462346264613933653737636439376563303765396533383265 +66383631353931383830313234326461383265356561616563643638353332396236343031383234 +31386438666361303932383435643461623734313163633632373937366137333939376133653064 +65336364323264646437363236626233376365306537323766613931616339396665323563343661 +35613337393334363931303537396637316137343137393963653637383763383830323762383062 +39343031303730613035383633323634323833316335653336343165636264363536303462356263 +37646438396232333661626539333738343732396139346334396135396234633161386264303038 +32666636626137313564383635623761363931323261346331636632623731336166646262633666 +32393534383561656438393161326661383939663835633930383635653236636136663665646163 +33393533653363356163373461616135616630653866343139643137363436346138376530363135 +35356536343863643834346666613831653161323039653637626662343433366363393831343038 +33313162643730626539663961636434386533356631643062333434383762653136323266613561 +64626138363466373662386162323865653738393065373063346334393431613132343663303336 +64633461636432303433396562656164313933356261363364656331623038393430376437393236 +63653031336465646536643464326136386666373037633137666539393634383432623631643962 +63323063363537643437643835626562623466373830623136333761636538376235643633333939 +31653963373234343762643234656332623561323334386139383461353461656236346361366565 +39383864396264386639626631613036666632623764646637313563376536313665373330363662 +39356261616632316163636533376637336537643332663336643831623334373731623032613961 +34656236346237353237653737386131343166303030313263366231376366653338663030343235 +38643533613732313562303133616165316431363562643530316635633464663236363339323533 +38316562396533626633636630333365653731626366356335333136396136613232633138393861 +38326436323433363838396363373334333064393731663733353439373662623839616666303833 +32356139383735373832643632383931646261623830636238353963373933643739346463616534 +66656663343962383131646564646163656466356438653732303062343166633463346131313635 +65613232633161313435626466326538333364313764373963353766633839626164396134323938 +35633164666333396536323566663036626134376432656565336237356130643236313133663137 +39633036346433653636656134313036666633393766353662313830663936366534626661356533 +39343832653535653461363839616433376431393833613731353539346464333663373739333663 +34303531303435363966333965373632386362383439303062316539646539396438306630316332 +33613963656364626130633836366331336536323965613266616564376362643033353830646266 +39323963393530663133633238643530356566636564336631306364316431373164306262373132 +63346135386235353962333331396263663637376364343330303163663432643765653966326338 +39613561356663653338653430616564366138383366356435366430316432346533653766383232 +39663638313637323966616664303230303933633937313062613230303930616135323464343536 +32386564363938373630306539323639363833393834313963336630623839383935323733343566 +32656266306134393461303338323361613139373931623039383231633964663863623537656132 +66663062633636616638386337383664636634636161616535356539646236373461323039316238 +37303535656331336662663566653133336465636466613631373364393935363561343937303030 +37343631396539373937336135653066376535356162623261353237626265643035333737326461 +63343130376465353331616164643836353266396265663839353331633830366438373866396334 +62626330656338393035636163616361383432353536623231373031376230663834393036653237 +35383134376361646464373632353664326134366232313539623733373630653334613338336233 +303733343761396532386366313439393063 diff --git a/group_vars/stage_prodwork01/plain.yml b/group_vars/stage_prodwork01/plain.yml new file mode 100644 index 0000000..353accf --- /dev/null +++ b/group_vars/stage_prodwork01/plain.yml @@ -0,0 +1,218 @@ +--- + +stage: "prodwork01" + +hcloud_firewall_app_specific_stuff: False + +# TODO read configuration with hetzner rest api +shared_service_network: "10.3.0.0/16" +shared_service_elastic_01: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-elastic-stack-elastic-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_elastic_02: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-elastic-stack-elastic-02' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_elastic_03: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-elastic-stack-elastic-03' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_logstash_01: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-elastic-stack-logstash-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_harbor_ip: 188.34.196.240 #server in prodnso!!! +shared_service_gitea_ip: 157.90.169.198 #server in prodnso!!! +shared_service_pdns_ip: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-pdns-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_mail_ip: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-mail-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_pg_master_ip: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-postgres-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_pg_slave_ip: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-postgres-02' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_maria_ip: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-maria-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_kube_cpl_01: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-kube-cpl-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_kube_cpl_02: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-kube-cpl-02' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_kube_cpl_03: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-kube-cpl-03' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_kube_node_01: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-kube-node-01' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_kube_node_02: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-kube-node-02' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" +shared_service_kube_node_03: "{{ stage_server_infos + | selectattr('name', 'match', stage + '-kube-node-03' ) + | map(attribute='private_ip') + | list + | first + | default('-') }}" + +shared_service_kube_ip: "{{ stage_private_ingress_loadbalancer_ip | default('-') }}" + +shared_service_maria_hostname: "{{ stage }}-maria-01" +shared_service_postgres_01_hostname: "{{ stage }}-postgres-01" +shared_service_elastic_stack_01_hostname: "{{ stage }}-elastic-stack-elastic-01" +shared_service_elastic_stack_02_hostname: "{{ stage }}-elastic-stack-elastic-02" +shared_service_elastic_stack_03_hostname: "{{ stage }}-elastic-stack-elastic-03" +shared_service_elastic_stack_logstash_01_hostname: "{{ stage }}-elastic-stack-logstash-01" +shared_service_elastic_stack_kibana_01_hostname: "{{ stage }}-elastic-stack-kibana-01" + +kube_cpl_01_hostname: "{{ stage }}-kube-cpl-01.{{ domain }}" +kube_cpl_02_hostname: "{{ stage }}-kube-cpl-02.{{ domain }}" +kube_cpl_03_hostname: "{{ stage }}-kube-cpl-03.{{ domain }}" +kube_node_01_hostname: "{{ stage }}-kube-node-01.{{ domain }}" +kube_node_02_hostname: "{{ stage }}-kube-node-02.{{ domain }}" +kube_node_03_hostname: "{{ stage }}-kube-node-03.{{ domain }}" + +shared_service_gitea_hostname: "prodnso-gitea-01.{{ domain }}" +shared_service_harbor_hostname: "prodnso-harbor-01.{{ domain }}" +shared_service_kube_prometheus_hostname: "{{ stage }}-kube-prometheus.{{ domain }}" +shared_service_kube_jaeger_collector_hostname: "{{ stage }}-kube-jaeger-collector.{{ domain }}" + +shared_service_hosts: [ + { + ip: "127.0.1.1", + name: "{{ inventory_hostname }}" + }, + { + ip: "{{ shared_service_elastic_01 }}", + name: "{{ shared_service_elastic_stack_01_hostname }}" + }, + { + ip: "{{ shared_service_elastic_02 }}", + name: "{{ shared_service_elastic_stack_02_hostname }}" + }, + { + ip: "{{ shared_service_elastic_03 }}", + name: "{{ shared_service_elastic_stack_03_hostname }}" + }, + { + ip: "{{ shared_service_logstash_01 }}", + name: "{{ shared_service_elastic_stack_logstash_01_hostname }}" + }, + { + ip: "{{ shared_service_maria_ip }}", + name: "{{ shared_service_maria_hostname }}" + }, + { + ip: "{{ shared_service_pg_master_ip }}", + name: "{{ shared_service_postgres_01_hostname }}" + }, + { + ip: "{{ shared_service_harbor_ip }}", + name: "{{ shared_service_harbor_hostname }}" + }, + { + ip: "{{ shared_service_kube_cpl_01 }}", + name: "{{ kube_cpl_01_hostname }}" + }, + { + ip: "{{ shared_service_kube_cpl_02 }}", + name: "{{ kube_cpl_02_hostname }}" + }, + { + ip: "{{ shared_service_gitea_ip }}", + name: "{{ shared_service_gitea_hostname }}" + }, + { + ip: "{{ shared_service_kube_cpl_03 }}", + name: "{{ kube_cpl_03_hostname }}" + }, + { + ip: "{{ shared_service_kube_node_01 }}", + name: "{{ kube_node_01_hostname }}" + }, + { + ip: "{{ shared_service_kube_node_02 }}", + name: "{{ kube_node_02_hostname }}" + }, + { + ip: "{{ shared_service_kube_node_03 }}", + name: "{{ kube_node_03_hostname }}" + }, +] + +# TODO read configuration with hetzner rest api +elastic_stack_network: { + prodwork01-elastic-stack-elastic-01: "{{ shared_service_elastic_01 }}", + prodwork01-elastic-stack-elastic-02: "{{ shared_service_elastic_02 }}", + prodwork01-elastic-stack-elastic-03: "{{ shared_service_elastic_03 }}", +} + +# Note: all dollar signs in the hash need to be doubled for escaping. +# To create user:password pair, it's possible to use this command: +# echo $(htpasswd -nb user password) | sed -e s/\\$/\\$\\$/g +# TODO should be part of the automation (htpasswd -nb traefik-admin traefik-admin) +traefik_admin_username: "traefik-admin" +traefik_admin_password: "{{ traefik_admin_password_vault }}" + +grafana_admin_username: "grafana-admin" +grafana_admin_password: "{{ grafana_admin_password_vault }}" +grafana_user_smardigo_login: "smardigo" +grafana_user_smardigo_password: "{{ grafana_user_smardigo_password_vault }}" +harbor_username: "{{ docker_registry_username_vault }}" +harbor_token: "{{ docker_registry_token_vault }}" +elastic_admin_username: "{{ elastic_admin_username_vault }}" +elastic_admin_password: "{{ elastic_admin_password_vault }}" + +postgres_replicator_user_password: "{{ postgres_replicator_user_password_vault }}" + +mysql_root_username: "{{ mysql_root_username_vault }}" +mysql_root_password: "{{ mysql_root_password_vault }}" + +netgo_msteams_hook_cd: "{{ netgo_msteams_hook_cd_vault }}" +netgo_msteams_hook_alerting: "{{ netgo_msteams_hook_alerting_vault }}" + +kubernetes_with_awx: False diff --git a/group_vars/stage_prodwork01/vault.yml b/group_vars/stage_prodwork01/vault.yml new file mode 100644 index 0000000..8c9487a --- /dev/null +++ b/group_vars/stage_prodwork01/vault.yml @@ -0,0 +1,467 @@ +$ANSIBLE_VAULT;1.1;AES256 +31376136303461393238366661306362376566633162656530663632323931383566356430323862 +6238646639646538623030323539343539373536643932320a386165346361316362386234613435 +37663364393734356361383138393335616134633832376661303961326135363238343437303562 +3138613734323033340a356665333063666231643238316239353436353062633061306634346463 +37373334643530623030303062633862353431666433346266656664306561663565303337663834 +62646331626163643136343066383465393265383634313632306264386334666235336133393731 +35373836633462353964383265363634326264646435383461363362643162356466613331306362 +35333764323363383961373664363566346632653534373763333561633336393830323961666632 +65386536353632373766626434323338356632393635663736623333353033376161373234373664 +30353133366233636439343166323332366561633262383835363663366132633130346331376663 +65343166316464636363343331383734393062653230626435356430356238663634393333383864 +39623831363962363161613834373434386565636137323361643730356164393365376662303764 +38653163303734363333623165383037346466646231633464363131323963363734326162393736 +66343639383161663734613439613736306334623962663765313166383262346661626630313364 +65343865363938613730616336323965653762656636323363316139323466613832373165616136 +64643838633239623762636531666537636435336331376137323562306666313637663461343232 +63656632376237396233363532643334666563326136653435353136653963633761396638633266 +38643262313138663263323164373064636364646431643462303036643033653566663835383435 +34653137323365376466373833663238353537666463623762373837316164633030366138376165 +30336532343961376430326662613434663932633361366434383136623731326366326439323138 +37663630346631663565363831663735366432326335376566383232303562363537376339376262 +62336331653439356537323138323162623230616666343663643961356262663839626266363130 +39356164663733366662393935393164373661333263663933373439353263303036643033313361 +63333862393136633861316662353030353662633638643330343234383565373232633161353561 +64363164633261386239626539363933353332396636613235353533393833626565633739313230 +37363534653363353633653765353263343832633764643937643366326261323063633965353536 +30373137303534633832646166623639656664633032356135336163373134323337343261633965 +39653264653036386463313539363634623531653064306635373432653464306532613165613463 +33623261386439353437636666326430656437346639663236643338393735346261633230376538 +36313637613539326662366236653661623565376137373065353232636563666230363562333365 +38666137613266653461353739376136316430643931333462323432393263666630656236383937 +38363131663062343830363835323033663036356266646534613038303166383534393465653430 +31323161633438663833313737373664643236646635393964393262316331386461333263646330 +38333366373537326264663333633334303935353535663038343938613831653333346365323836 +31356163393432396466323065303337633537633132636438353932303563393063396230393263 +31306335643565343432643961383833333761383731633064613564656364363436633537323938 +61383430393930383438373433383335343266363062616564383865396665626434376337656563 +30353636653330643963613965343237623536346332363533353530353064343065393361393164 +30343435393035353832313638656339613266356464373566613030616539376665636333386261 +32353733376362316134636564373635316462303236346339303637636365346563303437663039 +30383966396262366638393861326166363761643830613861653238373561613866373564353336 +33343564333361643137343262626365366462373666623863303662346165653239323732646130 +37633963343833613135313663643438356132623165373539323166663330303264616466353539 +61386433656663383532386332643131346466623131333739313832646532663961376537393439 +62616536313965623839353331663939393439666235333038653734633535623862623630633935 +30313561633234306234636430303961353930626237353632633233306539383365396266386234 +62653966646235353865393539633130343735303233646137353831633433356165396162633131 +38653231626162623036613861666135643065313333636239376432326430636236616431613566 +61626661663236373636356661623136333939626564636366663532313062613265383432646364 +66313637333338386336363739353235626139386263343265653865663362306330666261656435 +64303966373333313736656565343862666166373465356438666564653666653062636436303164 +34366162333137323437396663643538383730313234303661353239326638396435383864626466 +33373232323662356562316435636339393466633031326463333032363930353065646464613735 +31306132396137363562663736366131653430643431653634363362663266623532626230396562 +38386162383331393462383766633635373038353561303462643133393336313135623232386233 +62613462366462373537333862653963303765303565313663343833653236343933376635663765 +34393238636238356234303237623732616362303032323831366338316462333637366165313435 +65343861343361663864653739386531323639643832316264373139396234636535343866653966 +30643061393437653461613134623833666432303563613738613865383933386138383536353332 +39353431383933356536613639613339666538306632643561373833363437626466613262626361 +64653365666661353632656635336464333433373832653535396633316364363937353134353035 +66303037643532323330303433633730626437316630353637636236663235376636303839346361 +32306538623763393533376566633630663530643965386566653764303638373761666533396563 +62396230396266626131626463313762356333646530396133366538643965633863313766333332 +37363637343335626462333666643362653735336432343635393364613865363663386366623164 +30376430313761623236366336363661656634323430666665653739336138363932393836653762 +38346431656464653161363239323834393338376264373934663261386565353031323966363361 +30363735363132373963643661323030346365333532396665393661323066343563393933643033 +32656230373266366137663239333162323732663163636337353438366438366266613163376335 +35623732303235343365643533393135643132656330366135353063613165666563303839326636 +66353339323133313662393331396536666233643861316634613830346435303237656130373136 +36366137386261306335616338333737663139323061626466326136643239346466393961353331 +61616538656538353539363737333138343361636634303436376536323435353838303830663161 +37346635383061303039656230336336616439633936613135333438353235326666646236393863 +33306637343764643334663962626164393734356265303165623032356133366637373130646136 +63663532613537396265643837616364616530306631333232313466623465653534353831373033 +38633839313863393032646238373162643866303065343236323265336533663732316433666432 +38646535383831306165303435303764343238613230306139373432333534333562383963376238 +62393664393761623839396161313265343630343435636662626563353932393363363733316538 +63666563656462623563393435626165346237356663343132383938626433653063636133396461 +66386331643032626562343366653961656631613433396430323630333239636530303238646464 +64666464323336663732333861666331613037376232333264336230333965376334333665333537 +32653730376561663038396664623237383536636461633032656634383561343438393233643237 +30333536373864663537383932323136363830366638346435653331663836613232363561343630 +61363435383838633861343838333865616330393661313465373737303737313438623334666332 +30363737623362313435383231383333393733333563346166373130633231666130363535393835 +62613337343765396134636462623039396665653936393238333430323136666536313233396462 +65333565616533376161343633343364393538643963343237326232663362383961613466623432 +63363561393132663763373532333761663764313064663838663266396231393365633334356133 +37636230633561333863363765383965616537356437613439643136666363656237333333633962 +35356366656366623164643536363563646535623465636163613264396436613863366663313530 +33336130623032323932613238366166633833623265376234616636356339363938323238616665 +37313361343865333138653035306664383461373834643263643363626630326532303162393230 +34336330306637636637633536333633376361373161383038633661646130303439373565636465 +30333230316166383439653235653464353165616265643961373431623933623432306636313463 +61643937306266626132396164353361336437623434653339663630306135373532343839613661 +38616330363066346135343433643462613931343361633262636539303737353334303536376463 +33373065643231653236333939333564313039316238613831393163636639653237336163353663 +62316634323933343330633436643033616365363230306262653637346538663038643863323562 +30333662326138363934306264313534343732653734313763356438326632383737393662356264 +33343034343335663030313032363533393136336135633863303561656634316437366236616466 +63353062363537356633663033633136383664623161363466653730373631363261313630646336 +66313762306466656230646338383737376461663135366532313533376130613732336535363436 +31636537376661386233316161323031343830623734633163396234643635666434383261623635 +38633264383939303630313235373261626535323261323464633134643135663033643366336639 +30653239366537313564623131313636336535373663643836323461363634306637663539323365 +65393337393435666337646231333437316637643934663337666666393930386333616231646664 +65356338386163626166613632626666343635313062393233633033653966376566336139633937 +30663438633032356463616435663562343865333035396436633034623037653563626536326465 +66303466313536373562303833386334646233313161666637353163383830643636363432633562 +65333337343066393733393631653732613139393031343866306239333661376234623333646233 +31626537356166373938643438653262643236393238303562393538376331613162346235396633 +66623731643261613363363962383563353232373933643339323262626236333439343439633636 +30346562323331633061623035323236383136616635343865656564356463326563653264653734 +33356163613361383835323537326630336630666232353232383334646334333762636231616266 +32633565376466323162393931383236363061306361326663373738373166303239333030326530 +61323331373765363839623261633261656261633563343864613635616537633630663737623762 +64373032613962653763316234396431383131333963306666613336656162343566306163353565 +32643038333033616139303737623337626366323964656261643831313334356332656339396536 +33656563613463383236343037303963343264656234393237336261356638326262616237333866 +30656365333865353032646239393930656564373335623734643961356435333761383566653737 +36616164313635363134666161313832343961366162373933373738316230636539616435353435 +38313962383066376432633235623665376430616364653766646537636336303435313231613631 +38343262333233353363646361306435313030653133653861343765313261313730396564633337 +61663037633737646433386333643362303337303538366137623139313462383736373363316632 +32326364653936643639396636323565313864396163353334616238643964626633386234633662 +32356533373362646632623431393436373630376335373465613232396536376438323039346666 +66346362393234383332633736653466363434343833313764663066633136373238316230613561 +39346461323433623238656263623834306235383761363435663663666266383766333061616262 +66393730616632636531333165383235633132306266363766363534653339393834616639653832 +36613530636430643062303637613339646535373562356437336530393665316130626362366538 +39363730383330613638636437613334323530353037316132336461333039366638626139323363 +38613630663834323163373163633664363633653530663037336565366433396333616363636130 +38646131323061616164626532636266373366366564326639323536643638333764653266383737 +32363636663561343033383865373636643032643938333465393364663962303366343835616330 +36343132303262393233343231356331633762623261386166373632346237396633353430346335 +31663737666164653539386435386335636439373338313262666534333737326535636466646462 +35383838353466303635373730303232623834616462303462396634313734643861376262366463 +37313438663235363439663737373866393764613663643130366531393337383734336638373637 +33666436646161366331656239326535353466316632343331383863623430613063386132636132 +30663036613133346632323233356563626236663435323165616630383330303933633232336231 +62626233363032333465356436303063626535333233336166633334346665393037666533373334 +65333138393961356665363232626632303734626364653633613334663937316639383566346131 +64663937383939623266306338373963363466363337623632336636633134623631636438613935 +35376536313230323263656534376162623063353037633264356162373961623836633634373366 +63313736393466353066333939663936313730636137386562653831373433663236333530663362 +37333634633134666464316336643661643664363631626631623537393033623964613861326330 +36346238313538376565323037383263356630626266643964663161636465343733373837653635 +32616263323361383337313434353530363038303635633763343738623838336637333163366130 +62316362326237383133303862323934396332643864313166383661303862656466383362363133 +63663966653861643266663866383963333663346332356439323030306230633164623863333135 +30356335393033663139633531633937386364353166313963333436656238663431323964323735 +36306533633832393538303363623239316263343031323336313735333133373766313665623261 +61633164326238316536323933396466383165306234646662656661353962653032386339366236 +30616336646262323139396165386336373262633639353130613932656434653632336135373664 +34343036373233353538616562656166333236353133353761313838656461303764396630653765 +35663238623038323931653734663062623434366465306233633435633266383030373434303962 +62326230326539383533343036633366386239623464653338393338666163636630376662313636 +63393763626237313539303563323139343332343933313530376666633238323635366136323265 +39356564643863313765666465343466356165353065393964663238656464613738663931336366 +66353164353836353836363736356663363761366466383538396331346166356466333634353933 +65326539653264376432356261343965313665646166363139373132333334353530653034383530 +32323434316436636461646632623635323735656332346439613533643031326261383535656165 +62386632633438376639623362623532333036333136633332393061633831393564616164386333 +36323036666666303931666137356131353339626234316361373432346661303232396265623336 +36363137613562663865393135643639396361373361393566356336336432666466643831653239 +61363662363733383664666535303430323336313930663361666533353936353337636664356638 +38316438343364626462623237326164333636336333313930626266316132353762653537346537 +38363064316530643839343062333636643830646239616435396433613836613835653537336139 +36363033386662653039393539623436666162613562616531656430386561393731346162396461 +64646534633132656533363734643063653033326563333131373338313833356634656334363266 +62376330336365626137363232336331366161373231373133643335373263616630333465383234 +63663065336165386635363631343666316365643963306531366261626161656331373236636637 +62303032663137363363306564333864316535326564636464396430326439633436356336323665 +62666535626265323833396137633735633631333631633638343433323031343439633734303364 +33646664353733313738366662363132343133643939383733323134363062343237616330323866 +37343932346137663339346334313930663734363539303933356534643437643161303134383163 +31313465396439306130363534303733643834343234643837303462303866616638643937353830 +39346136663166343333316565653039363833386361636465663333636534663066653966303635 +37613931623332393031396538373634656139363666353061336634346134303834376264623530 +31376432346437323566303761333266626264336232636131656133383763366439323064313263 +36363330656537356262353933323733393565336461316230613732336438666432346530323465 +65613036383830616335306163633536306562613637633934353062356165303935653636653762 +36383164643635666563386466663039383339616533643139303664396531373735363661623766 +65323738303430653637303566323335343836333466353930623830346365336565313035383131 +39386633663832316635373066613466633930613034303530313035366237346631393864393132 +62313662633030363235343437353537336432336361376166386435363635396130666639353166 +35386535313066656234316331323731616630636635616561653236646466336165363434346131 +31333632643364663331383336343136366363633537663365386534653463366561313234363636 +30656332663064353937373333626436613934653834643265343431393563363932396538303930 +64653839666137616631656363313464636531383065623566626665656234373534653330613962 +30326138623630396264316634646636343262613638666634333134636638643631313237323964 +63363134363435333662386139653564613761366533323036633462636236376237346663613039 +34303339326136633366306338373362356136613732663666326133343562323638303661666436 +34396561313930363934363936393839383432383538636464303232333266303863633137663235 +63303939333931373934313764363263343431386234323734313563313539616238386434343336 +63303433386337666331643862343563666235636132623033636335613663373363333032636135 +64333664373961346361336163373864316437656163383336326366326565333434386465306565 +39346334656266313735346539613365353565313234333164643732343735613935636137363862 +36303635343966613163373336313238373133396461313962333465623566643237613264633235 +30623161303435323439376638363930376637316631633064366430353231643934623732663236 +63613262333866393137626430386232336230663262356333643861393765623865353136383036 +36626562366134356331643032363633613834316563363163666131666261616165336464396135 +63343066363563623861636462376134623832373230386331376135313463643232306634313038 +63623337333465313264653137643366393934646661393931343966306235323966626235633063 +35616634343433323730386235343863343333646333386664623365633331373832353661396230 +37643333373966353238363631626366316664343030663766663265383262363161613337383537 +34663261313564643763363734343736656466373862366163376138613031656530373134626337 +38633364323330343236303634313139623231396137326534613039393064643565373764626563 +65653830316261663837326363333034343438653965666561386631663066313134326235343239 +38663739356337393664656566346163386533663761666636393235366539363039613333653664 +63306638386561393362373762623637326465303234616238313931353261356366393166376562 +34636466353137353630306433636330316631653237663630666337313266373730636533393036 +32376363333761303238363136323933653432383138303363343732393661616633306463336566 +65316566633630363963353939343261303338363534393537633133333236303837343062346435 +63613566386663383034373766366361336131333364393761623336363132386537383432656335 +66653466343262343266333862303232633661373561613235316136336536353534346461643134 +30623561666438316136313030363433633066393438356461363161346564323738613336643932 +65333162313966643232343163323231313530383533663465633031656464323866306239396661 +36643739386131636633376538623831343538396636626262376564393363326363643133613065 +36636562643139393135303135343737393466333533386333666332363437333933333131636463 +31346638303036326433633539613934633933313232363735313565353462646237626462363636 +31326261336232396539336161663239393034663665396331363636383534353933653033656337 +62643963636439383166333362323965653938346465396430356130333734653537313363303462 +37323961323232303865373332646631323466356632616161326138656664656632333630326535 +64663733323336663531653964303831353264663863616232396337646337346166353238363965 +39346262643333326666323863643033646430373230303535353564626536666634663135653365 +64636233633761373037323431316436383862633062333332343137386330333932633538303732 +33653737643366393561363531626235373761333836663063613063343730323037363839643333 +39613631346364353139323661366538346136333034633165653330616434613736666131626137 +33336332393432616135656134323936373362616331393937376338393037643539663934653361 +61626362623139363532623062343831373932633766303366303738656235653666333431333234 +38343934363037663363326631333230313466306636653432313736363435383963343662323332 +36316637396661653665663535623333326634393966306336393336343536366438386662333431 +64653732616664663566386361373636353865333238313032353533373661623164633530326131 +31366565336435643938393461643431636634303932633831383261306636626234333366366563 +64386636326535393462306639636537306161613530386238316638386263653630396262626165 +61653338616530356534613537636566643265646431303734326334326232363462646631353739 +34343939393662393635346361366166666139333765653866356238633964653739396365613234 +38383666336430383334313265373233646166616230636363626264363961643362383063653132 +66643765623366623438343061346435323936373635633130306535333661396232396434326562 +32383562633533316132346565373832353365306463626362613066653433316133386562373039 +63373432663364653561326332316563323363373937303664343166383263616230623030393362 +32373532656636333061653963383262663339663562393962303336333433373136393564316665 +32306262306330393933626335616263343964633938303238386437366332306166353533363966 +39376663363734373238343363393239666535353963346633656338303336353935363930323333 +65653261363536613436306135313236623537333539616530343639366638356561663364363366 +33626666333164633030353563353836646665633561323038316334343736376137393933623731 +32313237653839616263306232373861643266303364373962636534303065613438313062336466 +34613762363232613962313364616632353233623836363638353464643136356638643330373538 +32366230393131376234383438303938363363333434643534616566353635306265346239323763 +34616339616538336264643765626631313035383839396232663631636634653137396533313933 +30646134303332663135623538663637396133316531306538333465646165396537653133386132 +62613830363163643532373261613134366536636365376238323631346166393437656131366435 +34306263303938643963393961616134376163326639356165343332663835376239643463303032 +39353635333732613964653033643036306166303139383937326361363131333532363532633834 +64336238663932643832383462636130623766363835643834623531323738613863313838316561 +32613664616334373133633037643236663637333565353961393535613636336436643766636533 +38393531653338353563386462306534626238346262643161363934636339396135323937353135 +35613131383564666263363763393339346239636538333464623361666236653235313836373237 +38323038653233646539383562396332363161333263383632336638663766636439643834303132 +63623335313239616138383633323036646131626433646664613762653764373063393531353239 +66313534396333623837323934353830396232663235393866346664393864393535323233623262 +32336661353635326633346236653265366637633335383066316261363032316231643133646563 +36656365353938646234626562303461333166323231333964393262396363323138363464316136 +36643331343432643266313939623838356332313262333530386665323934613131313330656461 +37643961343334386137316563306565376438373165343863346638333531363438623235633861 +38373363353031313937346364326534393031646533333362363633396539643030353862643364 +33626634373435383061396666343337346633393366343331323664393335393431326164326137 +34336361623062653636336566656438353639343334326263393666326133663863323032633061 +61393466383039396364343237383331313138383465343630343766396563316137623662653439 +31376530353532656262316232376564666362353631626339653162616530303561373932366563 +35393465643161323134613237363264353235663066376461343036313131303837313562333332 +34626132363439333963653531336265666435333636366133316261623536343834336136386361 +66353031316437333765633532396233626437633937316430393765646566316164626132613837 +36363037633239643030383163396631343932613834353338643765393364306332656630653364 +33626637653830343866653335626464663135393266646365383562643762643966633631383665 +64383836323765646165363032333466306363636631613266303738663465393837633734373535 +34366439383762386661333730333666343239356135353234376636316465323337306436643335 +38343932303336626439303337646566646534313832353835303164363061366138653633343064 +37326461616630373533376562643038333433643061363432373739343434663461646363633237 +38343431653730613661616365663762316134636237623233643166353763633263393330346461 +36303039313065643438656237396234616435333431316661343539326638633134336666396461 +32306331346236383165383961376166656461653734656231323130626639313164376666306235 +36653263353232666261613735653161366634373766303466333463353462353835646162316365 +63333939636630343332376331303831386562646333323738623037626562373664643631653364 +32656438313231386362643538393134623361636163343763653038626564343431666639373334 +62353436383938633733366635663238356164316563396366323863646565366436303165306534 +66366139306334373238303036353839326436653332313962623439386433383231656263333265 +38613162383830346330323561306535346330653835393536353961303535396361356532303438 +32373331636238326263326366656338666562643839323834353666333363333561643838663266 +33636135653238303535636637333833323461373435373361656132343430623566383534393931 +34393534366331313939633162333662666264306634643066333061653439383961656566653039 +66356138643734346237643139383830653933366334313137656439353765326238343138396435 +61306234353563376335343661363363323239613531643532383530373666346630616131386338 +37663531323536353833383431376336623631323963653065633636613263663238326235636438 +62656563363634616535363761626165383234373431333662393635653831313539613137633666 +32653763356632666462633538353938633261663235313862393239383462646665616165636439 +61326263646136613739626336316531383137313566323730356439653735623336636437393462 +63353930396239663731333463356337353136306630633764316162633764303265643039663963 +35353664613532326466636365643861616437333432326461336365646366633537626132613235 +66366531306364373534393233363632323563316166663933633233353165386430333938386465 +65623038373139353633353034313132306266373962373633646133656462353337383235373433 +36643665366533373635613833383962396136613836623135653331346666353064636438373932 +37313166356436336333323038343734663538313265333030636363356633646433363561663862 +61663635643761613166396331653761386165663038323438313861383637303363366364326630 +39386461393832633338373264346335633266303765336639643833613265636133363739366161 +37366235623637336165636565326232303633653733353635383833363564613238323835313030 +35643566623635616532363130653262653135366566366638653263643464346337356363303738 +36636638643036333135383262373839356331373062623830663835653833343439303937346138 +38616536326564643933363965626335393430633062333830656561633566636432653663663036 +66313837393364316631306334653439633232626330623834313935643366633662316263343033 +36316562323963633463386366616537613734643631323163346536643636333163333430646662 +36633563363338663238613163396338383362633831333439633933363964346138626134353766 +35616434633639333061333364336465336533396636376634303736306535313563616565653135 +62353038616135636139393335333662643765653465393239323231666563653165383039313834 +34313966363162386539316238343632313234313931346335656136623434326132316536373732 +36363261666430336662643665346532323361356134336364663431653666363765346130323430 +61386631343962363935363538346536363837363764663664396163376466303663343137383832 +62353933323261313261376532303837306232336263386162613565313966336564303436313639 +61396133333661626138323232636439616234336434633134316662343334663166353032636463 +63616238356138306164346666346235396533653635653031653964313839353435353963396332 +65323735386461313134363137333732356138643335313737623330366265383861313564373066 +35393966363132346431323963386631623532663338343334383930373433343631323732323031 +33373936336462363933306261646263313165383936643335626362333263383035336636323666 +35323531636635303936376664643730623333633634373931653137616130343462316132326361 +64626664383562386165346235323038613734666235386463653133613836633335613866653532 +33373930356662616434323030636231333966643866653265663265303430643639313330616539 +31323239343938376239303630653636613565336361336332623966623431303231313666656161 +30333233616639336636313436663361306135313132636631663865636663636431663536633732 +61303764663531373261333938343966633162313137386231643937653634616635303562316331 +39643862353965323337313232613030386434383237653061343634333062376166353662336431 +39653730393762613466663466656139346366393137336263646234353337363136346533343638 +63393265363430383431343233366333363433616362653438383663353436356464383632653863 +39623730393331333761386136623866623663333737316331316337353962616533383632366562 +66313566343932363266613466646632316538323766303232343336643036663930346466376633 +32653831623363646539333633346538303131396630396664303134623061363061613538633836 +33613630613335326137306131346135333633353832373238653030353737356164663937336363 +37383864643164353862333437643138383631363238316664643535386238333932353634643933 +64643134366264353734316532396235623139656231356463343765383762373666643464343965 +61363562373930333061363731313066396661643732636462323535383636623337353331393139 +39373561636134373733613733633566643261383934346535376261313662373932393436316266 +33333562313862336537353633663837383762663238613664663034643134653632333065353063 +66633832623335633634326130346634656631626339313936336234393464306462333764326232 +62616363613533323862313363346134323639633066636565623031613939633065316133656437 +36376563653763636566613533346331303366613863666138616335313838656331353134313133 +38393966643637303835353162646131363865396535356461366466616137333162396566303666 +33386431663333356137623337366430356463353866376638376262393738636537353738623130 +31633438313238653035393861653062656539326534343139663461303964623937646435303861 +31656634383934373261306664333465313833616362396635616365343662383261653131373962 +31316662393161323765313336623234653165653133393830363561653539656665653630336538 +66373037376365366134653232386431393334316333376465633462623763383130383931323133 +61613262653434656562346265353663623937386336343337303166386334626561303863376539 +36373636356338326537393935333730366364336239633035633561363563666134633161666430 +66633263643164396566643561626633326532393434643164366465626561636437343861653962 +62656134383038363032346435333762663564666264383866623865303832376136623266663363 +64393931303066663733303161653137386432346562356164306162313266336334613233633965 +30336135303935626434333036343765666433313938643337353138633736373564343261613966 +33336537396633613933663232666663663135393063323136666536383161323061333263396131 +66376362353039613431343366316639323438313866636334633261343630316263313431316664 +31363939393835346437366635383537393438623536396637343930633461326530383462356139 +63306334306637633065613365326139353932636336376534393962323764633931393633376163 +38616131343661323038646538653037386437626539383233663138323262643162633634303930 +66313031663234356539386666336263356366653438653134323334333932623263313632313136 +32613238336137316331363135393339303332636262643561653030333133336265656134323064 +62663761666162616534303333643235363762666539623666323135303639383461633564366432 +34326435653730613462363635313664656139306663633836393264626233623035336164333463 +64363738313761326432353336396633333430303236653930643035336533613532626331373565 +35393361363536316431313661366633396365383134356232383030333538383930373533336137 +35303033386464643061396238363235373634633430346461363331343263323130343637343963 +30393539633261326139383332613036353938613930383162346466393930366331326133373438 +34363436313331366138356239326336663537393139333530613564653936396335393236356439 +61633561353962353665326361643638333134653631383762656561363664303839353266306264 +63306135313030363664373534636464313264623366616465373738323663306666653532613765 +30656533656462346234646462626534306135633036653666633737613532663466383334633063 +32333565636632393930663966613962626237626135303963613434323232386136303635333766 +37313038306439616265363435356362313261663237353934373763376439326364666137623630 +32316563303065613564353636646333313931373263373334383264336239336632653763313833 +63623633323061346131653664343239333061363235313839353762346533393462376139353135 +35333034333364393763336530353532666331346263396334313934353539313333613864646138 +66356439386533613036643830656236636630303336616532633438353734376561326335643366 +66613061396630343264313361333365343638343865666530323761343666363536386364313333 +34663436386363613338656363346665396432666261313066376262346662306135383934633262 +37613232306130323764303331343161616162643466383038303630366637616266376539346361 +32316234386232653365313862353037316331663139643463623561656638336164373964653032 +32316537353831346663613832646662643338653737336439333566656233373166333934643266 +32313939363165356531353861343366626364346436366632666537393538373737316561623331 +37623761363661366339393232643137306438346631386237326437323234316234393634373233 +31366563313036393963316264343061353330623437633131353562623063656230306133336663 +33353161366137373061623232633933373064626335663639663932303730666338393933636636 +38303265323139333263393338316637663138616333363165313166386630346133306138393761 +37353566643338663963663638653831666335343865383965326531343533356534313039306331 +65633166366361373961633131663830643936386539623830316230333661633965336233333537 +65623038336464373334626430623438353034663935623866323539313965373166393739663830 +63646137656135333064343161393734343532393237656164343535656564633335633038383739 +64356432666264353865383633363037376161326464656433383631323761613134356665633138 +37636664623635303661313930363564376132626663316162613339323935633239303530633331 +35343261383430666635626637386135656464653366333631633763666164353665373235373832 +32636336666261616532303530626239313239366333643035326132333966333133306135393439 +61663661366632363431626531363534366236393361343839613962623637316164623639653765 +35353266646339326230366161666431376365383530343039616262633166616631623537396137 +31333665366636333961363962383639333762313066373633306532343066333534376232313263 +30386661633136326332623032623139653562633564616561616636373932386165623461346465 +35646664633131333633643863663066323263393838376434326461373535343337396466646432 +36656630353364643033363962666565393239616461386663643539353336663935633966626263 +64356438626238333937386139386138333739363436313031656165623537653932353037393537 +62303431663735303937656630336630386332616265316532376461376466666663333962323666 +62393365663339353536626662303338653830613537646365613530653066363837623631633731 +30366438333339373534326632373830636363343338643233663934326539343433316134336131 +64323530643737633064663031313765656565613931313166643434353838383134313965666464 +64373665336332353265373261653030373164316233646439336365336136303931643034313738 +35333535613631353935343561313234383763316564656665356162613763376137383533326338 +33336638643062653033633331666263643964313263376363616330363038383530663138653536 +66376335316438353362626436633831666334386230643566393463343164393331336332393738 +66643133626230303831623430663636626132313435636264376465353664626338333466396535 +36643032336431343132313337326165316436363263646465313163356530316136363362306631 +63633564376331343031313730613331393864633634316462626164633839393432383130373430 +30633532666563303039343366346433353738626237666166653930346533306662366365356339 +63306161663262323538633133383664353561343664363731633334356234316132376261643761 +64646332326537383563663039373261313933656539336164643438373763303261326135653463 +64656236623166613132616535306630366261316434303234333139313938316135393766386233 +36313134663764323530333736306465343066383137353835383130303230623037646634616666 +34303438653530386336303237633934383938373333373535356165663566646537656536336466 +66616462333435666536613934363633316664326462623635366531386332366239653963383437 +30633563613262643330323237663664643533623531613665306135363463656163376134376632 +65323263646137623639613861643838346665653139623164386265613165333531373831363631 +65643734396339633264323966356131393166626530646561366138313131666630353739643165 +31333437643461356330653135333036663363313666323736613231393030353834343465366562 +30653565303464316632633237396662323463626463353262343234343730333331333638616663 +63316563613266303762303236386663623166393035333233353666666630366266343466663939 +31393336653133393537336334333163613165376163663931383930336532303030663738666438 +65616330353063656566386634323936343034323938303562366632306338613338636266623732 +65663564343635353635333939646330666565333939336664356464633232393362326631333832 +32313765383963323963306362613036663566363861376232643033366636643566376631353661 +36323865623237303966373732363161323064363662636364366564633235343131623265663035 +38343862613039363936336265383034633138333164613434653766666131623737666536623761 +38613963636162393239323034653561333234643331626163643363316264333365633066333136 +32313635386664343134663632613333643331646131636663643162333231343563316336613332 +36363962343763346161663664663333613636653733623965663662326435393134613364376233 +63306439373536656332313233626637393037323133666138623662353132653166366161373263 +66626131643133373665356361326236656165343339353030656663353230613931366261396363 +61663636323133346362333630666634393530323133346435653735343134373237363034333635 +35303663363837633139633038653932376139396239326134336236653263306662353639326630 +39346637356639303265326234333866356431373439313065366634663963613961353231363138 +39323137653433346638653836393032613263303430653936653330363566623866396634326664 +34353833303566313635346138373365663133363030653861643361363831333633363933663337 +63363165343661363964363263623936393466613465623366313565343464376566356437326463 +33623861616134343835336533383235363139336132663936346537393030653462656461653261 +35306561383433383439393736646531646162313734383630373763383161393463313734346161 +34303961373239623463333933333165336164623964343739623935623832623436383139333137 +34653734663430653062353566663133323634333932353933643262346139376135646162383034 +35613537313861383835373733396637373235366264373766333231616531333733633332396432 +63323462363437313366313632333133656166383238313464636238663638343831383635363764 +32323366396663376635653664623062346535653465646634646432643938383533653039653661 +32303031333332383638353831386362346634613062323530306432353437343634646362623566 +35313934323439393437633834343162616633663733353032396136313766333031643538613439 +63383035626161356232333430643438656433306330303138613833303934393466343666343238 +38343835656265306330366535376430356333636262616535626564363831383034656464393165 +30653635646164653963303930626437633937393838663165303763376632636132373264653935 +34626430313634303534356236316662383539393239346234636537303661633331373734363264 +65386563353737636130343061636364663836663030383838623731396662303663656161376665 +39666336393861383962393064316263666331363234336331633834666230653661306361333663 +32313333356433303939623563396664366536343566343535366161346135356263313932363535 +30306632336239313733313138373839313334663034396438613365653136353534366134393865 +65363533303938636262303166663438643063643062396633663364646437306235366164306332 +3663316534333861663435383939393134643738323661373839 diff --git a/hcloud_firewall.yml b/hcloud_firewall.yml index a029c6e..2e18366 100644 --- a/hcloud_firewall.yml +++ b/hcloud_firewall.yml @@ -125,3 +125,5 @@ loop: "{{ hcloud_firewall_objects_management }}" loop_control: loop_var: firewall_object + # end of BLOCK + when: hcloud_firewall_app_specific_stuff | default(True) diff --git a/host_vars/prodwork01-postgres-01.yml b/host_vars/prodwork01-postgres-01.yml new file mode 100644 index 0000000..fd65816 --- /dev/null +++ b/host_vars/prodwork01-postgres-01.yml @@ -0,0 +1,4 @@ +--- + +hetzner_server_type: cpx21 +server_type: "master" diff --git a/host_vars/prodwork01-postgres-02.yml b/host_vars/prodwork01-postgres-02.yml new file mode 100644 index 0000000..ed431e3 --- /dev/null +++ b/host_vars/prodwork01-postgres-02.yml @@ -0,0 +1,4 @@ +--- + +hetzner_server_type: cpx21 +server_type: "slave" diff --git a/kubernetes.yml b/kubernetes.yml index f86f043..27f2c33 100644 --- a/kubernetes.yml +++ b/kubernetes.yml @@ -28,5 +28,7 @@ - { role: kubernetes/cert_manager } - { role: kubernetes/external_dns } - { role: kubernetes/ingress_controller } - - { role: kubernetes/argocd } - - { role: kubernetes/awx } + - role: kubernetes/argocd + when: kubernetes_with_argocd | default(True) + - role: kubernetes/awx + when: kubernetes_with_awx | default(True) diff --git a/mobene.yml b/mobene.yml new file mode 100644 index 0000000..cdf1c0f --- /dev/null +++ b/mobene.yml @@ -0,0 +1,128 @@ +--- + +# creates kubernetes namespace with secrets for usage with mobene +# Parameters: +# secrets for mobene/namespaces read from group_vars + +- name: 'apply mobene setup to {{ host | default("kube_control_plane") }}' + hosts: '{{ host | default("kube_control_plane") }}' + serial: "{{ serial_number | default(10) }}" + + pre_tasks: + - name: "Check if ansible version is at least 2.10.x" + assert: + that: + - ansible_version.major >= 2 + - ansible_version.minor >= 10 + msg: "The ansible version has to be at least ({{ ansible_version.full }})" + tags: + - always + + - name: "Import autodiscover pre-tasks" + import_tasks: tasks/autodiscover_pre_tasks.yml + tags: + - always + + roles: + - role: kubernetes/namespace + vars: + k8s_namespace: cus-mobene-nsodev + k8s_secrets: + - name: connect-secrets + data: + JWT_SECRET: "{{ mobene.nsodev.connect.secrets.JWT_SECRET | string | b64encode }}" + ADMIN_PASSWORD: "{{ mobene.nsodev.connect.secrets.ADMIN_PASSWORD | string | b64encode }}" + ELASTIC_USERNAME: "{{ mobene.nsodev.connect.secrets.ELASTIC_USERNAME | string | b64encode }}" + ELASTIC_PASSWORD: "{{ mobene.nsodev.connect.secrets.ELASTIC_PASSWORD | string | b64encode }}" + DATASOURCE_USERNAME: "{{ mobene.nsodev.connect.secrets.DATASOURCE_USERNAME | string | b64encode }}" + DATASOURCE_PASSWORD: "{{ mobene.nsodev.connect.secrets.DATASOURCE_PASSWORD | string | b64encode }}" + MAIL_USER: "{{ mobene.nsodev.connect.secrets.MAIL_USER | string | b64encode }}" + MAIL_PASSWORD: "{{ mobene.nsodev.connect.secrets.MAIL_PASSWORD | string | b64encode }}" + OIDC_CLIENT_SECRET: "{{ mobene.nsodev.connect.secrets.OIDC_CLIENT_SECRET | string | b64encode }}" + - name: iam-secrets + data: + JWT_SECRET: "{{ mobene.nsodev.iam.secrets.JWT_SECRET | string | b64encode }}" + KEYCLOAK_ADMIN_PASSWORD: "{{ mobene.nsodev.iam.secrets.KEYCLOAK_ADMIN_PASSWORD | string | b64encode }}" + KEYCLOAK_ADMIN_USERNAME: "{{ mobene.nsodev.iam.secrets.KEYCLOAK_ADMIN_USERNAME | string | b64encode }}" + - name: sepa-exporter-secrets + data: + SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.nsodev.sepaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}" + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.nsodev.sepaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: uba-exporter-secrets + data: + SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.nsodev.ubaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}" + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.nsodev.ubaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: wordpress-secrets + data: + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.nsodev.wordpress.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: elastic-client-cert + data: + ca.crt: "{{ mobene.nsodev.elastic.secrets.caCrt | string | b64encode }}" + - role: kubernetes/namespace + vars: + k8s_namespace: cus-mobene-cusqa + k8s_secrets: + - name: connect-secrets + data: + JWT_SECRET: "{{ mobene.cusqa.connect.secrets.JWT_SECRET | string | b64encode }}" + ADMIN_PASSWORD: "{{ mobene.cusqa.connect.secrets.ADMIN_PASSWORD | string | b64encode }}" + ELASTIC_USERNAME: "{{ mobene.cusqa.connect.secrets.ELASTIC_USERNAME | string | b64encode }}" + ELASTIC_PASSWORD: "{{ mobene.cusqa.connect.secrets.ELASTIC_PASSWORD | string | b64encode }}" + DATASOURCE_USERNAME: "{{ mobene.cusqa.connect.secrets.DATASOURCE_USERNAME | string | b64encode }}" + DATASOURCE_PASSWORD: "{{ mobene.cusqa.connect.secrets.DATASOURCE_PASSWORD | string | b64encode }}" + MAIL_USER: "{{ mobene.cusqa.connect.secrets.MAIL_USER | string | b64encode }}" + MAIL_PASSWORD: "{{ mobene.cusqa.connect.secrets.MAIL_USER | string | b64encode }}" + OIDC_CLIENT_SECRET: "{{ mobene.cusqa.connect.secrets.OIDC_CLIENT_SECRET | string | b64encode }}" + - name: iam-secrets + data: + JWT_SECRET: "{{ mobene.cusqa.iam.secrets.JWT_SECRET | string | b64encode }}" + KEYCLOAK_ADMIN_PASSWORD: "{{ mobene.cusqa.iam.secrets.KEYCLOAK_ADMIN_PASSWORD | string | b64encode }}" + KEYCLOAK_ADMIN_USERNAME: "{{ mobene.cusqa.iam.secrets.KEYCLOAK_ADMIN_USERNAME | string | b64encode }}" + - name: sepa-exporter-secrets + data: + SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusqa.sepaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}" + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusqa.sepaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: uba-exporter-secrets + data: + SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusqa.ubaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}" + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusqa.ubaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: wordpress-secrets + data: + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusqa.wordpress.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: elastic-client-cert + data: + ca.crt: "{{ mobene.cusqa.elastic.secrets.caCrt | string | b64encode }}" + - role: kubernetes/namespace + vars: + k8s_namespace: cus-mobene-cusprod + k8s_secrets: + - name: connect-secrets + data: + JWT_SECRET: "{{ mobene.cusprod.connect.secrets.JWT_SECRET | string | b64encode }}" + ADMIN_PASSWORD: "{{ mobene.cusprod.connect.secrets.ADMIN_PASSWORD | string | b64encode }}" + ELASTIC_USERNAME: "{{ mobene.cusprod.connect.secrets.ELASTIC_USERNAME | string | b64encode }}" + ELASTIC_PASSWORD: "{{ mobene.cusprod.connect.secrets.ELASTIC_PASSWORD | string | b64encode }}" + DATASOURCE_USERNAME: "{{ mobene.cusprod.connect.secrets.DATASOURCE_USERNAME | string | b64encode }}" + DATASOURCE_PASSWORD: "{{ mobene.cusprod.connect.secrets.DATASOURCE_PASSWORD | string | b64encode }}" + MAIL_USER: "{{ mobene.cusprod.connect.secrets.MAIL_USER | string | b64encode }}" + MAIL_PASSWORD: "{{ mobene.cusprod.connect.secrets.MAIL_USER | string | b64encode }}" + OIDC_CLIENT_SECRET: "{{ mobene.cusprod.connect.secrets.OIDC_CLIENT_SECRET | string | b64encode }}" + - name: iam-secrets + data: + JWT_SECRET: "{{ mobene.cusprod.iam.secrets.JWT_SECRET | string | b64encode }}" + KEYCLOAK_ADMIN_PASSWORD: "{{ mobene.cusprod.iam.secrets.KEYCLOAK_ADMIN_PASSWORD | string | b64encode }}" + KEYCLOAK_ADMIN_USERNAME: "{{ mobene.cusprod.iam.secrets.KEYCLOAK_ADMIN_USERNAME | string | b64encode }}" + - name: sepa-exporter-secrets + data: + SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusprod.sepaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}" + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusprod.sepaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: uba-exporter-secrets + data: + SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusprod.ubaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}" + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusprod.ubaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: wordpress-secrets + data: + SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusprod.wordpress.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}" + - name: elastic-client-cert + data: + ca.crt: "{{ mobene.cusprod.elastic.secrets.caCrt | string | b64encode }}" diff --git a/provisioning.yml b/provisioning.yml index f0133a4..baa4958 100644 --- a/provisioning.yml +++ b/provisioning.yml @@ -2,7 +2,7 @@ - name: 'apply setup to {{ host | default("all") }}' hosts: '{{ host | default("all") }}' - serial: "{{ serial_number | default(1) }}" + serial: "{{ serial_number | default(5) }}" gather_facts: no become: no diff --git a/roles/confirm_postgres/defaults/main.yml b/roles/confirm_postgres/defaults/main.yml new file mode 100644 index 0000000..152483c --- /dev/null +++ b/roles/confirm_postgres/defaults/main.yml @@ -0,0 +1,8 @@ +--- +confirm_postgres_database: '{{ stage }}_{{ tenant_id }}_{{ cluster_name }}_confirm' +confirm_postgres_password: 'confirm-postgres-admin' + +postgres_acls: + - name: "{{ confirm_postgres_database }}" + password: "{{ confirm_postgres_password }}" + trusted_cidr_entry: "{{ shared_service_network }}" diff --git a/roles/confirm_postgres/tasks/main.yml b/roles/confirm_postgres/tasks/main.yml new file mode 100644 index 0000000..c9146e3 --- /dev/null +++ b/roles/confirm_postgres/tasks/main.yml @@ -0,0 +1,18 @@ +--- + +### tags: + +- name: "Updating database on {{ inventory_hostname }}" + include_role: + name: postgres + tasks_from: _update_database_state + when: + - database_backup_state is not defined + +- name: "Creating/Restoring database backup on {{ inventory_hostname }}" + include_role: + name: postgres + tasks_from: _create_database_backup.yml + when: + - database_backup_state is defined + - database_backup_state in ['dump', 'restore'] diff --git a/roles/kibana/tasks/_configure_spaces.yml b/roles/kibana/tasks/_configure_spaces.yml index 300efe1..800c034 100644 --- a/roles/kibana/tasks/_configure_spaces.yml +++ b/roles/kibana/tasks/_configure_spaces.yml @@ -14,7 +14,10 @@ user: "{{ elastic_admin_username }}" password: "{{ elastic_admin_password }}" force_basic_auth: yes + retries: 5 + delay: 15 register: all_spaces + until: all_spaces.status in [200] become: false - name: "Lookup space object if exists" diff --git a/roles/kubernetes/argocd/defaults/main.yml b/roles/kubernetes/argocd/defaults/main.yml index 90d49c7..d0637d0 100644 --- a/roles/kubernetes/argocd/defaults/main.yml +++ b/roles/kubernetes/argocd/defaults/main.yml @@ -2,6 +2,8 @@ k8s_argocd_helm__name: "argo-cd" k8s_argocd_helm__release_namespace: "argo-cd" +k8s_argocd_with_keycloak: True + argo_realm_name: &argoname 'argocd' argo_realm_display_name: *argoname diff --git a/roles/kubernetes/argocd/tasks/main.yml b/roles/kubernetes/argocd/tasks/main.yml index b212152..24f1655 100644 --- a/roles/kubernetes/argocd/tasks/main.yml +++ b/roles/kubernetes/argocd/tasks/main.yml @@ -7,6 +7,8 @@ apply: tags: - argo-cd + when: + - k8s_argocd_with_keycloak tags: - argo-cd @@ -20,6 +22,7 @@ create_client: False current_realm_password_policy: '' when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] args: apply: @@ -38,6 +41,7 @@ current_realm_groups: - name: "{{ argo_realm_group }}" when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] args: apply: @@ -54,6 +58,7 @@ current_realm_name: '{{ argo_realm_name }}' current_realm_users: '{{ argo_realm_users }}' when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] args: apply: @@ -72,6 +77,7 @@ realm_name: '{{ argo_realm_name }}' bearer_token: '{{ access_token }}' when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] args: apply: @@ -103,6 +109,7 @@ protocol: openid-connect protocolMapper: oidc-group-membership-mapper when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] tags: - argo-cd @@ -124,6 +131,8 @@ keycloak_clientscope_name: '{{ argo_keycloak_clientscope_name }}' keycloak_clientscope_protocol: '{{ argo_keycloak_clientscope_protocol }}' keycloak_client_secret: '{{ argo_keycloak_client_secret }}' + when: + - k8s_argocd_with_keycloak tags: - argo-cd @@ -139,6 +148,7 @@ keycloak_client_object: '{{ keycloak_realm_create_client }}' bearer_token: '{{ access_token }}' when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] args: apply: @@ -159,6 +169,7 @@ status_code: [200] register: argo_realm_clients when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] tags: - argo-cd @@ -168,6 +179,7 @@ set_fact: id_of_client: '{{ ( argo_realm_clients.json | selectattr("clientId","equalto",argo_client_id ) | first ).id }}' when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] tags: - argo-cd @@ -184,6 +196,7 @@ status_code: [200] register: client_secret when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] tags: - argo-cd @@ -193,6 +206,7 @@ msg: "DEBUGGING: {{ client_secret.json.value }}" when: - debug + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] tags: - argo-cd @@ -235,13 +249,14 @@ extra: oidc.keycloak.clientSecret: '{{ client_secret.json.value }}' when: + - k8s_argocd_with_keycloak - inventory_hostname == groups['kube_control_plane'][0] tags: - argo-cd - name: "Combining helm release values" set_fact: - combined_helm__release_values: '{{ k8s_argocd_helm__release_values | combine(additional_helm_values, recursive=True) }}' + combined_helm__release_values: '{{ k8s_argocd_helm__release_values | combine(additional_helm_values| default({}), recursive=True) }}' when: - inventory_hostname == groups['kube_control_plane'][0] tags: diff --git a/roles/kubernetes/base/tasks/main.yml b/roles/kubernetes/base/tasks/main.yml index 1d39229..971af24 100644 --- a/roles/kubernetes/base/tasks/main.yml +++ b/roles/kubernetes/base/tasks/main.yml @@ -68,3 +68,12 @@ - "'kube_control_plane' in group_names" tags: - base + +- name: "Enable PodSecurity" + include_tasks: podsecurity.yml + args: + apply: + tags: + - base + tags: + - base diff --git a/roles/kubernetes/base/tasks/podsecurity.yml b/roles/kubernetes/base/tasks/podsecurity.yml new file mode 100644 index 0000000..81a118d --- /dev/null +++ b/roles/kubernetes/base/tasks/podsecurity.yml @@ -0,0 +1,41 @@ +--- +# disclaimer +# I was not able to enable pod security flags via kubespray and role out +# in existing cluster +# +# tried to set following VARS +# * kube_kubeadm_apiserver_extra_args +# * kubelet_custom_flags +# rollout with --tags kubelet,master +# also whole cluster.yml +# => but flags weren't set + +- name: "Configure kubelet" + become: yes + block: + - name: "Add line in kubelet.env file" + ansible.builtin.lineinfile: + state: present + path: '/etc/kubernetes/kubelet.env' + insertafter: '^--runtime-cgroups=/systemd/system.slice' + line: '--feature-gates=PodSecurity=true \' + register: kubelet_conf + + - name: "Restart kubelet" + systemd: + name: kubelet + state: restarted + when: kubelet_conf.changed + when: + - inventory_hostname in groups['k8s_cluster'] + +- name: "Configure apiserver: Add line in apiserver manifest" + become: yes + throttle: 1 + ansible.builtin.lineinfile: + state: present + path: '/etc/kubernetes/manifests/kube-apiserver.yaml' + insertafter: '- --secure-port=6443' + line: ' - --feature-gates=PodSecurity=true' + when: + - inventory_hostname in groups['kube_control_plane'] diff --git a/roles/kubernetes/ingress_controller/defaults/main.yml b/roles/kubernetes/ingress_controller/defaults/main.yml index 8166a11..4c1eb96 100644 --- a/roles/kubernetes/ingress_controller/defaults/main.yml +++ b/roles/kubernetes/ingress_controller/defaults/main.yml @@ -17,12 +17,14 @@ k8s_ingress_helm__release_values: topologyKey: app.kubernetes.io/name replicaCount: 3 config: + # see https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap compute-full-forwarded-for: "true" ssl-ciphers: "EECDH+AESGCM:EDH+AESGCM" ssl-protocols: "TLSv1.3" ssl-redirect: false use-forwarded-headers: "true" use-proxy-protocol: "true" + large-client-header-buffers: "4 16k" whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}" service: externalTrafficPolicy: Local @@ -31,6 +33,7 @@ k8s_ingress_helm__release_values: http: &httpnodeport 30473 https: 30474 annotations: + # see https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations load-balancer.hetzner.cloud/type: "lb11" load-balancer.hetzner.cloud/location: nbg1 load-balancer.hetzner.cloud/name: "{{ stage }}-ingress" diff --git a/roles/kubernetes/namespace/defaults/main.yml b/roles/kubernetes/namespace/defaults/main.yml index 35532a4..6106d90 100644 --- a/roles/kubernetes/namespace/defaults/main.yml +++ b/roles/kubernetes/namespace/defaults/main.yml @@ -1,4 +1,4 @@ --- -k8s_namespace: "default" +k8s_namespace: "" k8s_docker_registry_key: "harbor-pull-secret-key" diff --git a/roles/kubernetes/namespace/tasks/main.yml b/roles/kubernetes/namespace/tasks/main.yml index 465c929..6dd272b 100644 --- a/roles/kubernetes/namespace/tasks/main.yml +++ b/roles/kubernetes/namespace/tasks/main.yml @@ -11,6 +11,7 @@ kind: Namespace state: present when: + - k8s_namespace is defined - inventory_hostname == groups['kube_control_plane'][0] tags: - namespace @@ -29,7 +30,26 @@ name: "{{ k8s_docker_registry_key }}" namespace: "{{ k8s_namespace }}" type: kubernetes.io/dockerconfigjson + when: + - k8s_namespace is defined + - inventory_hostname == groups['kube_control_plane'][0] + tags: + - namespace + +- name: "Create secrets for <{{ k8s_namespace }}>" + become: yes + kubernetes.core.k8s: + definition: + api_version: v1 + kind: Secret + metadata: + namespace: "{{ k8s_namespace }}" + name: "{{ item.name }}" + type: Opaque + data: "{{ item.data }}" + loop: "{{ k8s_secrets }}" when: + - k8s_namespace is defined - inventory_hostname == groups['kube_control_plane'][0] tags: - namespace diff --git a/stage-prodwork01 b/stage-prodwork01 new file mode 100644 index 0000000..0649162 --- /dev/null +++ b/stage-prodwork01 @@ -0,0 +1,53 @@ +[backup] +prodwork01-backup-01 + +[elastic] +prodwork01-elastic-stack-elastic-01 +prodwork01-elastic-stack-elastic-02 +prodwork01-elastic-stack-elastic-03 + +[kibana] +prodwork01-elastic-stack-kibana-01 + +[logstash] +prodwork01-elastic-stack-logstash-01 +[maria] +prodwork01-maria-01 + +[postgres] +prodwork01-postgres-01 +prodwork01-postgres-02 + +[kube_control_plane] +prodwork01-kube-cpl-01 +prodwork01-kube-cpl-02 +prodwork01-kube-cpl-03 + +[etcd] +prodwork01-kube-cpl-01 +prodwork01-kube-cpl-02 +prodwork01-kube-cpl-03 + +[kube_node] +prodwork01-kube-node-01 +prodwork01-kube-node-02 +prodwork01-kube-node-03 + +[k8s_cluster:children] +kube_control_plane +kube_node + +[stage_prodwork01:children] +backup +elastic +k8s_cluster +kibana +logstash +maria +postgres + +[all:children] +stage_prodwork01 + +[hcloud:children] +stage_prodwork01 diff --git a/stage-prodwork01-netgo-hcloud.yml b/stage-prodwork01-netgo-hcloud.yml new file mode 100644 index 0000000..095ccbe --- /dev/null +++ b/stage-prodwork01-netgo-hcloud.yml @@ -0,0 +1,26 @@ +# dynamic inventory for hetzner which reads the stage variable from environment +# +# parameters: +# HETZNER_CLOUD_TOKEN := hetzner cloud api token +# HETZNER_LABEL_SELECTOR := the label selector to use (note: multiple selectors are not supported by rest api) +# (e.g. stage=dev) +# (e.g. service=prometheus) +# usage: +# export HETZNER_LABEL_SELECTOR='stage=dev' +# ansible-playbook -i stage-netgo-hcloud.yml ... + +plugin: netgo-hcloud + +stage: "prodwork01" +label_selector: "stage=prodwork01" # jinja isn't available here + +api_token: !vault | + $ANSIBLE_VAULT;1.1;AES256 + 65326639616235646137306562353830363131636463396634653335653331376364613562353839 + 3333343562646437653937393930393933353632616438620a396231343232393830636462366130 + 62373261613734313136613532343634633465333263633139663030643237316630393964373835 + 6139366563313932640a613665376430643436313636663534326466333737396666356231316436 + 34333931663765366536623564356466336235366463323765323862623135616430653930646561 + 38353132663861353631373239356430633938383134663761383930326238396131316136333438 + 36663738363033333634366138303639346465316531646565653339643838393062633566336664 + 64333061663666323330 diff --git a/tasks/smardigo_management_message.yml b/tasks/smardigo_management_message.yml index d5e9961..f308194 100644 --- a/tasks/smardigo_management_message.yml +++ b/tasks/smardigo_management_message.yml @@ -8,12 +8,20 @@ become: false tags: - update_deployment + when: + - scope_id is defined + - process_instance_id is defined + - smardigo_management_action is defined - name: "Setting smardigo_auth_token_value as fact" set_fact: smardigo_auth_token_value: "{{ smardigo_user_token_result.token }}" tags: - update_deployment + when: + - scope_id is defined + - process_instance_id is defined + - smardigo_management_action is defined - name: "Sending smardigo management message <{{ smardigo_management_action }}> to <{{ scope_id }}/{{ process_instance_id }}>" uri: diff --git a/templates/elastic-certs/prodwork01-certs/ca/ca.crt b/templates/elastic-certs/prodwork01-certs/ca/ca.crt new file mode 100644 index 0000000..72da2b9 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/ca/ca.crt @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDSjCCAjKgAwIBAgIVAJz8EHave11QgUZM6Q8TOd52bxtkMA0GCSqGSIb3DQEB +CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu +ZXJhdGVkIENBMB4XDTIyMDYwMjA5NDExNloXDTIzMDYwMjA5NDExNlowNDEyMDAG +A1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5lcmF0ZWQgQ0Ew +ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKLIyAlhpjrKh4NkOEDmAT +o2cIovNfNYSUNzvTb3JWEzXxSQKk3+wnfWf8USqmAB64TnNb6+XXWkY4DOl7qgq8 +qF8DPWRcCOiq51k+XO1/E6uZrroixTUEO+/x+KyN6lTqZzpfJKhXIUAmB3Dd+5Ea +k5cMh7JR+9LQmI2EcXocP8gS0UIHaDJyKWuaiMaRnWvtd4GilFPntRWkPK6Vg27B +ikqQQctnwSRBzDyFDthP/F8jeIbLSQDRUlgoKZdR+uJnl7ORqjgSVbJ40JuSFdGT ++YeH4jGHr+Vdt8FkKgpd6ycspfQDv0B7BYc+aDQGzG3IcE/w2Z3lQXzuLbPYqhqt +AgMBAAGjUzBRMB0GA1UdDgQWBBSTF3JFMd6SXGi2NfhvX0xPLwPqejAfBgNVHSME +GDAWgBSTF3JFMd6SXGi2NfhvX0xPLwPqejAPBgNVHRMBAf8EBTADAQH/MA0GCSqG +SIb3DQEBCwUAA4IBAQAvfT85nTWZXO0KNobByxBMkgIOi2SImyieKDaZ72Mc+u5N +d4Qhqxk2cr6jN1KTItAape9+5kxxN/frIFXnK2lmGoQaIUCnIcSbyuVLzpqN5NBB +KmCxZnvjyg5n9as6BrASs6TiDWjCf8B6oHqN8MuHXD7zrq/qwFpaPNIPz/285/y1 +8qnrNQ2SnP/9PCtvleYmpKcTxqO4UisDb/YRWqhQB4ZnfArMa6z4NOFjUjjjLxCN +R2qEtaZ722Jy/YAkYWMnFtMm8qWB2jfI1pGG7JSUasyTBu1FrWjkSy7cmBZz+vdt +b9pAHIT2kjuFE9Rs42yIRxfM+VhAkxJk+NKLzcvm +-----END CERTIFICATE----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.crt b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.crt new file mode 100644 index 0000000..f749d5b --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.crt @@ -0,0 +1,21 @@ +-----BEGIN CERTIFICATE----- +MIIDezCCAmOgAwIBAgIVAPqavL8mnZPr3OpXKmTImH9MJOTtMA0GCSqGSIb3DQEB +CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu +ZXJhdGVkIENBMB4XDTIyMDYwMjA5NDExNloXDTIzMDYwMjA5NDExNlowLjEsMCoG +A1UEAxMjcHJvZHdvcmswMS1lbGFzdGljLXN0YWNrLWVsYXN0aWMtMDEwggEiMA0G +CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDest3HmCajMi3keCB8NI5l/Dc0EKw0 +u7RaybYstSuOazFZavozy/I00c1WL5glxoLOs/2oTwSuMFtpexMLG5P3f2u/SH6U +6e7cPnUXTfxAe0X7ACzE8LHgeSkc6N7VqBJk0F0g0/qFO+9L7Bux3TU2dvK4Rc3f +ftZ5m9WVqUtPkbRUsPU0qwSwaZN+4TZb9osWPUIpRHtZHlODebbzWj1qDuUpvJno +a/6FeAE9qtL7sUVtG+U6bS6dvVEkC4OfZjozPvAZFB4mo5Qo9gOWTP0nACnduu3e +H88VwmVTmLnPROQwoXA1Uv8EIjBPmooSrJtjJ9g/43TB9KYT7ikoJraxAgMBAAGj +gYkwgYYwHQYDVR0OBBYEFLMPn0v9NhQxCCFB42dibZTwjemLMB8GA1UdIwQYMBaA +FJMXckUx3pJcaLY1+G9fTE8vA+p6MDkGA1UdEQQyMDCCCWxvY2FsaG9zdIIjcHJv +ZHdvcmswMS1lbGFzdGljLXN0YWNrLWVsYXN0aWMtMDEwCQYDVR0TBAIwADANBgkq +hkiG9w0BAQsFAAOCAQEAAdTjEZOJEl+xpsXgHHQyzTIszGvADUIddhEvb/S/BzOE +w2bomKrPpKCS6Gf4H8KgL+6YgUimccWtvNwoaO4PjVz7HBJ+qs8TyZ7HMSOg6dbk +XPTqampJx6PgfoAZNjid9YWxqz1pdpIklXuQR3DCEnSB1Qe6Y4NXyBZ9uragr43j +Az0gHlCgZqICupatW0JzGgIat3MQBSKUa8IcjY1yP0hQT9pYC97GIyCDY3cl8nWP +2AvRjIWIVqApbUjRCygZyi4kZjnhswmvShHjotBia6YwwRrNO96VpxJJfN2yDfBD +N3VowYIIQmp4IMWn8/MjwEmurEhPz1mKw3dV+Fni7Q== +-----END CERTIFICATE----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.key new file mode 100644 index 0000000..74c3fc6 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpAIBAAKCAQEA3rLdx5gmozIt5HggfDSOZfw3NBCsNLu0Wsm2LLUrjmsxWWr6 +M8vyNNHNVi+YJcaCzrP9qE8ErjBbaXsTCxuT939rv0h+lOnu3D51F038QHtF+wAs +xPCx4HkpHOje1agSZNBdINP6hTvvS+wbsd01NnbyuEXN337WeZvVlalLT5G0VLD1 +NKsEsGmTfuE2W/aLFj1CKUR7WR5Tg3m281o9ag7lKbyZ6Gv+hXgBParS+7FFbRvl +Om0unb1RJAuDn2Y6Mz7wGRQeJqOUKPYDlkz9JwAp3brt3h/PFcJlU5i5z0TkMKFw +NVL/BCIwT5qKEqybYyfYP+N0wfSmE+4pKCa2sQIDAQABAoIBACgvepmzuPUl7uYV +TzdafH+mvYdlos15OZhQYdE7d/qhGSybgz6phLFHUphEyl22rpACJrmiWKPeEgC8 +trkAZvj4Q0cnG8BfXjzcAGEOL4CrPfuHEo0PKenpsyOGWf+P7pHGj6eG2OQF5q56 +kpzL3/hOCop5/iZgSu9y0V3KSM64k/dQPawV4zYPsc/M62E1RittBKw4+uIlUO81 +OGftIs0lDR9v7WfcJE0K5M6EtGlRj5eGJhTLMqsJIEHZjEaN1Is4ZqfWEkD5JGgh +a4Ck/IUi/4s+LmFb4qhrFNdm8hAiyp57QeLnKaCwx8uvFRi08DpabOnDQJGihiD2 +2qUpEoECgYEA8Fvkr2U7ykVzD6RDMSqJ0qx7+0wH90ZEyYSXT9RHzt26XNmUPg+Z +DmPAGLEuhn4ioE14493cfw6RoVtrw8Gl/jf9J/RS5tC0xS/Vy/w0K3CCNokHrQ1L +pL9dDMKm4josmr/F7VvFQH7ypPiB4OzfiPBET8qPvdV92aHwwmAYXmkCgYEA7TDF +7izfl6zWZLFimELx3T3UJqtpeZJvJCfhgIKou/7vC2Xpeh1IQzAnIpN3bf/17QMc +f4BMdyQ8481vFXUE9kxIoAEmpy+WSOfxE9bfK0lQWMO2jT2JDJZvGm2e/PcjZa8/ +VxNfUjNkyTKqrQx5Gpp9M2yI33iry86TS5ednQkCgYEAzXzylNUKedJIHV5Ep5sD +e15FHMGSqd+kXViC+Be3UG8Vrd3CNBCnvLqg9zs7WHYr6jpxmPYLVYDCFl4PUquS +2zVItEjYO0bA1TghIyS6AU1NtYwPSO5t9io4RfmALTao/Z/oehWUHKCrl0hx2TcJ +oIwxCrpVi2kjD9W3/KWlD8kCgYAYgHtR2UzXrEERccmPlQrLIgHyZK6molvczknb +LqQjl3g2Izb1KGU4m5bPWZByyogrDbE58pTzkcjAd45MFySGFOdDsBrAFohdy6f5 +tq6jGBW2tbD78ilgJYIgpsZPt2/upyXR5uxn32s/5X4AFlPETcU1NLcG7r5AdXx9 +yJG9kQKBgQCadSNLejOwEbMuhqIvG7jLc8y1qcXGT5TLIM7JfojNqKSiq+sRhrb3 +x09TAXELAZjjJ2vmmblpcMdzgVEOTi0KVq2DhYj7hDmc9ljJnws5/s/NEUi6Ecm+ +IqjUfCU/ISguTEnKgCMBnhUQcu7jM1Q0FweUciBhaoRRuS1OtS6b8Q== +-----END RSA PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.pkcs8.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.pkcs8.key new file mode 100644 index 0000000..63b41b1 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.pkcs8.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDest3HmCajMi3k +eCB8NI5l/Dc0EKw0u7RaybYstSuOazFZavozy/I00c1WL5glxoLOs/2oTwSuMFtp +exMLG5P3f2u/SH6U6e7cPnUXTfxAe0X7ACzE8LHgeSkc6N7VqBJk0F0g0/qFO+9L +7Bux3TU2dvK4Rc3fftZ5m9WVqUtPkbRUsPU0qwSwaZN+4TZb9osWPUIpRHtZHlOD +ebbzWj1qDuUpvJnoa/6FeAE9qtL7sUVtG+U6bS6dvVEkC4OfZjozPvAZFB4mo5Qo +9gOWTP0nACnduu3eH88VwmVTmLnPROQwoXA1Uv8EIjBPmooSrJtjJ9g/43TB9KYT +7ikoJraxAgMBAAECggEAKC96mbO49SXu5hVPN1p8f6a9h2WizXk5mFBh0Tt3+qEZ +LJuDPqmEsUdSmETKXbaukAImuaJYo94SALy2uQBm+PhDRycbwF9ePNwAYQ4vgKs9 ++4cSjQ8p6emzI4ZZ/4/ukcaPp4bY5AXmrnqSnMvf+E4Kinn+JmBK73LRXcpIzriT +91A9rBXjNg+xz8zrYTVGK20ErDj64iVQ7zU4Z+0izSUNH2/tZ9wkTQrkzoS0aVGP +l4YmFMsyqwkgQdmMRo3Uizhmp9YSQPkkaCFrgKT8hSL/iz4uYVviqGsU12byECLK +nntB4ucpoLDHy68VGLTwOlps6cNAkaKGIPbapSkSgQKBgQDwW+SvZTvKRXMPpEMx +KonSrHv7TAf3RkTJhJdP1EfO3bpc2ZQ+D5kOY8AYsS6GfiKgTXjj3dx/DpGhW2vD +waX+N/0n9FLm0LTFL9XL/DQrcII2iQetDUukv10MwqbiOiyav8XtW8VAfvKk+IHg +7N+I8ERPyo+91X3ZofDCYBheaQKBgQDtMMXuLN+XrNZksWKYQvHdPdQmq2l5km8k +J+GAgqi7/u8LZel6HUhDMCcik3dt//XtAxx/gEx3JDzjzW8VdQT2TEigASanL5ZI +5/ET1t8rSVBYw7aNPYkMlm8abZ789yNlrz9XE19SM2TJMqqtDHkamn0zbIjfeKvL +zpNLl52dCQKBgQDNfPKU1Qp50kgdXkSnmwN7XkUcwZKp36RdWIL4F7dQbxWt3cI0 +EKe8uqD3OztYdivqOnGY9gtVgMIWXg9Sq5LbNUi0SNg7RsDVOCEjJLoBTU21jA9I +7m32KjhF+YAtNqj9n+h6FZQcoKuXSHHZNwmgjDEKulWLaSMP1bf8paUPyQKBgBiA +e1HZTNesQRFxyY+VCssiAfJkrqaiW9zOSdsupCOXeDYjNvUoZTibls9ZkHLKiCsN +sTnylPORyMB3jkwXJIYU50OwGsAWiF3Lp/m2rqMYFba1sPvyKWAlgiCmxk+3b+6n +JdHm7Gffaz/lfgAWU8RNxTU0twbuvkB1fH3Ikb2RAoGBAJp1I0t6M7ARsy6Goi8b +uMtzzLWpxcZPlMsgzsl+iM2opKKr6xGGtvfHT1MBcQsBmOMna+aZuWlwx3OBUQ5O +LQpWrYOFiPuEOZz2WMmfCzn+z80RSLoRyb4iqNR8JT8hKC5MScqAIwGeFRBy7uMz +VDQXB5RyIGFqhFG5LU61Lpvx +-----END PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.crt b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.crt new file mode 100644 index 0000000..f0cad4e --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.crt @@ -0,0 +1,21 @@ +-----BEGIN CERTIFICATE----- +MIIDezCCAmOgAwIBAgIVAOwTvYbLhMlWU85vHQdoxrAzxj7RMA0GCSqGSIb3DQEB +CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu +ZXJhdGVkIENBMB4XDTIyMDYwMjA5NDExNloXDTIzMDYwMjA5NDExNlowLjEsMCoG +A1UEAxMjcHJvZHdvcmswMS1lbGFzdGljLXN0YWNrLWVsYXN0aWMtMDIwggEiMA0G +CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFwvpcp3YosXj87rvra3Pvj4mlhFM +wVu733QC60ODj4lFgfCIcuMfA6HJUkBZ7JLKVFXfzvutDRBynMDUicuua5dk2H1K +i6JY+EhsP89qre7ns7XIhXoPZCDVnGUdNCWVWPiZ0TTjSjkyPodNGqRlMHpvoVFC +JcOEGtutPG8XOgwmM7MrcSpGNTYfbwTa0N02GZKJKanBYz/y7sKDQjXs7CM0eZ0j +EwMDu6ElNvZZDr1b8lTMa9gVbYWCcUe33GyKjml8TImkiBpuJsPyBKAJv6AGbgJh +t6nEyPoB3VsPapvM4HyjoXgcOU72p4cFU2pf/kE0YfL/GhGYYzbHlDPHAgMBAAGj +gYkwgYYwHQYDVR0OBBYEFPHQPS3RHersbAbfwIuN0WzdlglVMB8GA1UdIwQYMBaA +FJMXckUx3pJcaLY1+G9fTE8vA+p6MDkGA1UdEQQyMDCCCWxvY2FsaG9zdIIjcHJv +ZHdvcmswMS1lbGFzdGljLXN0YWNrLWVsYXN0aWMtMDIwCQYDVR0TBAIwADANBgkq +hkiG9w0BAQsFAAOCAQEARoixa7n6taLZlCBQXlvD99GkqNewvmhJO/2Rpsjs1q2Q +lmNsLBJcq2+Tqf/1Mqmgo8QavIecVULkRpXCVW8dIbf3HbNWOInd68OS+J0U7rV+ +zhZbW0QZgCp86WIKg6diG7ZC+pr9jxGj+9JpLhIqafamR3W49ZTwpjZEnnCpi0EG +nNKE1wt1d7UE5H4JXWuk3ZAY2Iuffme9oxK+KcwJxrYwtR/34nRRVIzvWp8BkAvl +b03aMxXAaYG8rPCXccMtTqduR4dA3Ca10NhAgxvLhtWFRCS6IOn7CISFZ5wRdG5C +DbE0XMutFzj0lVs70OPxeACeSC4KDk1opC5k70rsHQ== +-----END CERTIFICATE----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.key new file mode 100644 index 0000000..42dd42f --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpAIBAAKCAQEAmRcL6XKd2KLF4/O6762tz74+JpYRTMFbu990AutDg4+JRYHw +iHLjHwOhyVJAWeySylRV3877rQ0QcpzA1InLrmuXZNh9SouiWPhIbD/Paq3u57O1 +yIV6D2Qg1ZxlHTQllVj4mdE040o5Mj6HTRqkZTB6b6FRQiXDhBrbrTxvFzoMJjOz +K3EqRjU2H28E2tDdNhmSiSmpwWM/8u7Cg0I17OwjNHmdIxMDA7uhJTb2WQ69W/JU +zGvYFW2FgnFHt9xsio5pfEyJpIgabibD8gSgCb+gBm4CYbepxMj6Ad1bD2qbzOB8 +o6F4HDlO9qeHBVNqX/5BNGHy/xoRmGM2x5QzxwIDAQABAoIBADy3Lzo/AutQYzut +Bo7YSv8BbJTRH7tZVJCGZvRhaj1bSA4RItx69Cjwv9GglXUUpoMoP4asCJTxgXxz +PucMX4OlmD2evtI53wF6Nv73r8OXiBDM7WPBzE8eXwdZJ6EVdXJt/urCVj9uyJBs +zCyATIL1Xxm22Qtq/sf9/vIN7eE/vitLHhQkwmv4zqkd5pWbDRoStg0KEgwNOj3C +u+82atTJn3T1cfswi12bM4nq3/zkOArZIKXGI7kZxjb06Lmj9mB5klvMBvevAify ++S9aGPOC6+g80Pv4QXu63duru0jAD4MuseG4l+0A70B5avBjjT8bj5BstUDVFoi6 +EUi3kcECgYEA38zs+9mYAELHia7Qo3MpH1zJH2QdKZcjWcT65MA7fDZISIW0r/iy +LY90+zA1LcrG8V/kEwExIgQcxpRHPcCowULVqjFm5j6E40fptopsCGZuZ8lb59sm +5l1GBLFxpNQcFb76jIyNcY6sTvgPnZzzd5uBjF1uwY57hCWtu6/d9f0CgYEArx2y +GRwVTDPaxtEYg2i+A3OsKgbept8CTKkOzAOdHz8lMPm7e01+yiBL1l1YW9K15siX +j0I4LNEfld8ppemGPpSLum7r6h5Ul0mlIJt9FyY731QSP8mHGMb3Zj1WSlG63LH2 +v/F4J+f/SZLgShHLrqntAAxUcngAvEXel1ogWhMCgYBnFbJW80xDWn8kmSQ7FXFs +o8V0Mx4HqTk8QTI7qZv8w9gZp5SptYkE2V5N0U+9bvih98RLSLJD89b5VRVXiWVx +14IpaaX3CfcV5WrujOXkHKJgJeyyaEyLsYzt3nn1LUpebeBkWt1P4CLYIQS4WbH/ +dt5+NA8vEp0sKlrS59f6VQKBgQCQ0hcy6uW2IoBAwjXqn1ndUvFDxHCoQnANZBan +pClx6O/iA/YHr/w2PuVY/9OOBMGIfcXRpSr97WiYsnkoC+uIn6K66PbTpIfCohYc +1FpsJaOIO2foNssyM4HwnLNbPSIzWD4/WPxMzHF0sDIrL3JqHX+x9YB1NkctbP77 +3n443wKBgQDNTtCHdyO/Yls8nWS3QChK63NbIyi9p+iQOVUG8nk0nMK/vndCSnmW +j/J24xMCHJPgrIWDaeDENTKGUGfVXFrdNO4Y6Z5JiW6CGVFLRTZBa0ALFQFVlJ15 +NbvYBv8ZsphJgduC6Gcnmksv9wPb8eKHBFxsSOhVpBz1YBTn43rMRg== +-----END RSA PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.pkcs8.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.pkcs8.key new file mode 100644 index 0000000..b611328 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.pkcs8.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCZFwvpcp3YosXj +87rvra3Pvj4mlhFMwVu733QC60ODj4lFgfCIcuMfA6HJUkBZ7JLKVFXfzvutDRBy +nMDUicuua5dk2H1Ki6JY+EhsP89qre7ns7XIhXoPZCDVnGUdNCWVWPiZ0TTjSjky +PodNGqRlMHpvoVFCJcOEGtutPG8XOgwmM7MrcSpGNTYfbwTa0N02GZKJKanBYz/y +7sKDQjXs7CM0eZ0jEwMDu6ElNvZZDr1b8lTMa9gVbYWCcUe33GyKjml8TImkiBpu +JsPyBKAJv6AGbgJht6nEyPoB3VsPapvM4HyjoXgcOU72p4cFU2pf/kE0YfL/GhGY +YzbHlDPHAgMBAAECggEAPLcvOj8C61BjO60GjthK/wFslNEfu1lUkIZm9GFqPVtI +DhEi3Hr0KPC/0aCVdRSmgyg/hqwIlPGBfHM+5wxfg6WYPZ6+0jnfAXo2/vevw5eI +EMztY8HMTx5fB1knoRV1cm3+6sJWP27IkGzMLIBMgvVfGbbZC2r+x/3+8g3t4T++ +K0seFCTCa/jOqR3mlZsNGhK2DQoSDA06PcK77zZq1MmfdPVx+zCLXZszierf/OQ4 +CtkgpcYjuRnGNvTouaP2YHmSW8wG968CJ/L5L1oY84Lr6DzQ+/hBe7rd26u7SMAP +gy6x4biX7QDvQHlq8GONPxuPkGy1QNUWiLoRSLeRwQKBgQDfzOz72ZgAQseJrtCj +cykfXMkfZB0plyNZxPrkwDt8NkhIhbSv+LItj3T7MDUtysbxX+QTATEiBBzGlEc9 +wKjBQtWqMWbmPoTjR+m2imwIZm5nyVvn2ybmXUYEsXGk1BwVvvqMjI1xjqxO+A+d +nPN3m4GMXW7BjnuEJa27r931/QKBgQCvHbIZHBVMM9rG0RiDaL4Dc6wqBt6m3wJM +qQ7MA50fPyUw+bt7TX7KIEvWXVhb0rXmyJePQjgs0R+V3yml6YY+lIu6buvqHlSX +SaUgm30XJjvfVBI/yYcYxvdmPVZKUbrcsfa/8Xgn5/9JkuBKEcuuqe0ADFRyeAC8 +Rd6XWiBaEwKBgGcVslbzTENafySZJDsVcWyjxXQzHgepOTxBMjupm/zD2BmnlKm1 +iQTZXk3RT71u+KH3xEtIskPz1vlVFVeJZXHXgilppfcJ9xXlau6M5eQcomAl7LJo +TIuxjO3eefUtSl5t4GRa3U/gItghBLhZsf923n40Dy8SnSwqWtLn1/pVAoGBAJDS +FzLq5bYigEDCNeqfWd1S8UPEcKhCcA1kFqekKXHo7+ID9gev/DY+5Vj/044EwYh9 +xdGlKv3taJiyeSgL64iforro9tOkh8KiFhzUWmwlo4g7Z+g2yzIzgfCcs1s9IjNY +Pj9Y/EzMcXSwMisvcmodf7H1gHU2Ry1s/vvefjjfAoGBAM1O0Id3I79iWzydZLdA +KErrc1sjKL2n6JA5VQbyeTScwr++d0JKeZaP8nbjEwIck+CshYNp4MQ1MoZQZ9Vc +Wt007hjpnkmJboIZUUtFNkFrQAsVAVWUnXk1u9gG/xmymEmB24LoZyeaSy/3A9vx +4ocEXGxI6FWkHPVgFOfjesxG +-----END PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.crt b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.crt new file mode 100644 index 0000000..52c335f --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.crt @@ -0,0 +1,21 @@ +-----BEGIN CERTIFICATE----- +MIIDezCCAmOgAwIBAgIVAJ+5I3N0svnBwQNNzk1TD/8VnyYQMA0GCSqGSIb3DQEB +CwUAMDQxMjAwBgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2Vu +ZXJhdGVkIENBMB4XDTIyMDYwMjA5NDExNloXDTIzMDYwMjA5NDExNlowLjEsMCoG +A1UEAxMjcHJvZHdvcmswMS1lbGFzdGljLXN0YWNrLWVsYXN0aWMtMDMwggEiMA0G +CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCms7BLUI3WB/Ef7YrM3D28/Ho6LjOi +Rx9RddVN0I73oGRqI7PM7f/YW4dFWhbsfnpwvlsPaUqHzDSbqXvErk682dOPc5mR +i58DoXTZN9trqY69jnVqRmJApflKgV/BEDGqhqy3j5tghQ6gQIvlAfqV4Ol33UY2 +HCg/YdLoEWbvNs0Gh1LQlB2PJEvGw0P4Zdx522ENdRZdBYRmsZplMacFHbpKEE2G +VRSefrDK+WL2Rsdd9/DFAZFmnTPEYpkaO8JONC9JBI2ShalsgoLk/Xqpn/Mh3cnc +Rs1yIwZSnlK9WsaWM4YhM6t/ERkvaRvzdJdpW5LF3S5RPrke6/2NDhDxAgMBAAGj +gYkwgYYwHQYDVR0OBBYEFN6fOeFgDPGCOy+lAyI0Lhq2n1cKMB8GA1UdIwQYMBaA +FJMXckUx3pJcaLY1+G9fTE8vA+p6MDkGA1UdEQQyMDCCCWxvY2FsaG9zdIIjcHJv +ZHdvcmswMS1lbGFzdGljLXN0YWNrLWVsYXN0aWMtMDMwCQYDVR0TBAIwADANBgkq +hkiG9w0BAQsFAAOCAQEAK//iSxYuSlencvJk2X4KFPfvhOlYD55/fMXt+FPQob/G +7Jp/krRQhHzqlV73mJr6R/pc92s4pVQf2PEeFRXHvHNaXMVsdfsTiCSJlLfPbj/4 +SmVtOg8ST3xfGO6EZXaCQ2EQxRVha/kMH9sTxcHj/WXle7M5X2dTDVu/4SmyvZat +rVLk2gIV+q50EiSC7NIQ7GjOqjYCsLIROq4WKYQlfq/ePW1yFez9KlV+euvovZ02 +eTOfTdpNadp2Xwv9/qcxf5tcgSc086gYaNBD4LCHdrMSakXLCR5UigpNBXz5B1YC +PAL+8OJIlpZEAyVrCWIkkSIDF0KngAamfimWuPY0Yw== +-----END CERTIFICATE----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.key new file mode 100644 index 0000000..f9bd7bf --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEAprOwS1CN1gfxH+2KzNw9vPx6Oi4zokcfUXXVTdCO96BkaiOz +zO3/2FuHRVoW7H56cL5bD2lKh8w0m6l7xK5OvNnTj3OZkYufA6F02Tfba6mOvY51 +akZiQKX5SoFfwRAxqoast4+bYIUOoECL5QH6leDpd91GNhwoP2HS6BFm7zbNBodS +0JQdjyRLxsND+GXcedthDXUWXQWEZrGaZTGnBR26ShBNhlUUnn6wyvli9kbHXffw +xQGRZp0zxGKZGjvCTjQvSQSNkoWpbIKC5P16qZ/zId3J3EbNciMGUp5SvVrGljOG +ITOrfxEZL2kb83SXaVuSxd0uUT65Huv9jQ4Q8QIDAQABAoIBAGjPb1dbFWJtaeBO +JMe67aJGB79Ozy4Hk5xO/sbHCyyMDrZhLin5tbNdkMY8507YErmSJYSiCbcp4CXC +wMufYGgCeK6n2vUUmOzadbIhGXcui02JJS+lgx7se7mpb//d46w4sp1S0Dk2T0TY +cFyTCu9zErdHS164A2IealF4p4RcptvnKixbFwzgcnhs3PyzOkN6/yq7eZgKQbFO +uc/9kbCjXx257Gq+RHjPxUf4EM4n7vbHVbwqx8UqAOT4TrTFoHhFUoZc2YUgIlFY +gsTma8xNly/sxLCxfm58PNtlJyPNBQ8i40+G4qaEQ29wtdcwbsNKao+EB53sWzaq +b6iqCIUCgYEA3QyoBTTDq0tG9/Nk8e8D7u2NsrzEtUIe73/R/+I2YUSBwv5znDJS +PAk/jMbKOAGIAlNBv1FEPXEuHXZC5XOj/NI6A8ZEPRY5Lgs5ukoI7LKDjBevCcBa +fRNJJZ5gdLOFfIYqw+9G3ovO/FhsXSWRPSUFQZHJxA3f+qZSmEZhjDsCgYEAwQ85 +xJAIdwlpPQgTemEbQdIgvuLyl/4H1AVR6a8A2oR7I44VPub1iWskBvxBJ8YQRNqo +5P5pwmxfuPBVZSarH3coSG1gcd+c9daaNu4po5AUvsfOD/p8BbeY6gglX31JDDtD +cs+eODGZMS0fBRJzhyzQczmwRqhdvJg8teF8wMMCgYEA2i3Z0Xmo//OHEskMA7e0 +nCmgyKCFT5r5yc7RyczPe+YQZhScq7kHbfZ64Up84haw1gqzRFDEGBkUOUQ29x7S +54HgfUU+qUS8H3Q5AGR+tpHkQWxG+kr/haB5fEX8UnO295e9sjMEMjiwjmYAX1fr +KPzXWUa6bWZ8gnuT3nTpZ20CgYB/L2+oPhdFjI6nJXXnjqetUig+eTbGyRURKbwQ +Djmqu9J/1u/KM8+Yi1v9uhuWf1ZidgcEbVLxQgJBzRsE+1eK8C46oMwD2QQHtSx9 +eaM23Qm9sdXgEu23un9j1qAAa4I/K5/AuGSMsqgwjIA+ECzJ5c0hy+SEeBDg2Q5N +6FIOjwKBgD9A9XuEh/Lo+3jOe0nQU1DXawFP934X9JN5foU9H9+XTh+m1JQy8Eu2 +Su0km3jivsGZSvb+vgy5SZmcG7hIPe8qrzLFBfViAkl7JSe+/QBcZqZXEErR7EFb +Vm68q99D4KQ6qr9uKG9NWkJI0+SqozXfWXZ2HeIVxmY/0aggpfXo +-----END RSA PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.pkcs8.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.pkcs8.key new file mode 100644 index 0000000..51a22bb --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.pkcs8.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCms7BLUI3WB/Ef +7YrM3D28/Ho6LjOiRx9RddVN0I73oGRqI7PM7f/YW4dFWhbsfnpwvlsPaUqHzDSb +qXvErk682dOPc5mRi58DoXTZN9trqY69jnVqRmJApflKgV/BEDGqhqy3j5tghQ6g +QIvlAfqV4Ol33UY2HCg/YdLoEWbvNs0Gh1LQlB2PJEvGw0P4Zdx522ENdRZdBYRm +sZplMacFHbpKEE2GVRSefrDK+WL2Rsdd9/DFAZFmnTPEYpkaO8JONC9JBI2Shals +goLk/Xqpn/Mh3cncRs1yIwZSnlK9WsaWM4YhM6t/ERkvaRvzdJdpW5LF3S5RPrke +6/2NDhDxAgMBAAECggEAaM9vV1sVYm1p4E4kx7rtokYHv07PLgeTnE7+xscLLIwO +tmEuKfm1s12QxjznTtgSuZIlhKIJtyngJcLAy59gaAJ4rqfa9RSY7Np1siEZdy6L +TYklL6WDHux7ualv/93jrDiynVLQOTZPRNhwXJMK73MSt0dLXrgDYh5qUXinhFym +2+cqLFsXDOByeGzc/LM6Q3r/Krt5mApBsU65z/2RsKNfHbnsar5EeM/FR/gQzifu +9sdVvCrHxSoA5PhOtMWgeEVShlzZhSAiUViCxOZrzE2XL+zEsLF+bnw822UnI80F +DyLjT4bipoRDb3C11zBuw0pqj4QHnexbNqpvqKoIhQKBgQDdDKgFNMOrS0b382Tx +7wPu7Y2yvMS1Qh7vf9H/4jZhRIHC/nOcMlI8CT+Mxso4AYgCU0G/UUQ9cS4ddkLl +c6P80joDxkQ9FjkuCzm6SgjssoOMF68JwFp9E0klnmB0s4V8hirD70bei878WGxd +JZE9JQVBkcnEDd/6plKYRmGMOwKBgQDBDznEkAh3CWk9CBN6YRtB0iC+4vKX/gfU +BVHprwDahHsjjhU+5vWJayQG/EEnxhBE2qjk/mnCbF+48FVlJqsfdyhIbWBx35z1 +1po27imjkBS+x84P+nwFt5jqCCVffUkMO0Nyz544MZkxLR8FEnOHLNBzObBGqF28 +mDy14XzAwwKBgQDaLdnReaj/84cSyQwDt7ScKaDIoIVPmvnJztHJzM975hBmFJyr +uQdt9nrhSnziFrDWCrNEUMQYGRQ5RDb3HtLngeB9RT6pRLwfdDkAZH62keRBbEb6 +Sv+FoHl8RfxSc7b3l72yMwQyOLCOZgBfV+so/NdZRrptZnyCe5PedOlnbQKBgH8v +b6g+F0WMjqcldeeOp61SKD55NsbJFREpvBAOOaq70n/W78ozz5iLW/26G5Z/VmJ2 +BwRtUvFCAkHNGwT7V4rwLjqgzAPZBAe1LH15ozbdCb2x1eAS7be6f2PWoABrgj8r +n8C4ZIyyqDCMgD4QLMnlzSHL5IR4EODZDk3oUg6PAoGAP0D1e4SH8uj7eM57SdBT +UNdrAU/3fhf0k3l+hT0f35dOH6bUlDLwS7ZK7SSbeOK+wZlK9v6+DLlJmZwbuEg9 +7yqvMsUF9WICSXslJ779AFxmplcQStHsQVtWbryr30PgpDqqv24ob01aQkjT5Kqj +Nd9ZdnYd4hXGZj/RqCCl9eg= +-----END PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.crt b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.crt new file mode 100644 index 0000000..d8bab05 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.crt @@ -0,0 +1,21 @@ +-----BEGIN CERTIFICATE----- +MIIDdjCCAl6gAwIBAgIUIULS9J0GOpbr+aKfWyQpef+fyMEwDQYJKoZIhvcNAQEL +BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l +cmF0ZWQgQ0EwHhcNMjIwNjAyMDk0MTE2WhcNMjMwNjAyMDk0MTE2WjAsMSowKAYD +VQQDEyFwcm9kd29yazAxLWVsYXN0aWMtc3RhY2stZmlsZWJlYXQwggEiMA0GCSqG +SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlmMEXfnTK0fVeRX34OmfQtTi2bwqMeoz +eKIUIrbRN7BOGoF+V/uwzxWFHK2yqX0U2F0QE+QFEVpaxvQd1/zFwx0OArfy/CmN +3rcepQNCFI6OHjL7L+dd7UUMC+Ijm0IXzKFDXwVAckyH3wjZtJVgLHclcHqeuV/K +EB0Pa3yD2nQEciMW+LLmsgz9QWx2ptY1jWWUefIcmwNAuyI3LQ7NPfK+QqD7i/MJ +/74mfotiDzVquNVmM6Op2H+7aH/QnDAWZ5Vkm4aDGqG59Pr2PU2nDy0DByq59zg1 +QoJC5sOsClfhrQnMfOfcyqwIn0Qvm1Vz40yo6HNcow8VVOZYs3YpAgMBAAGjgYcw +gYQwHQYDVR0OBBYEFKUtI5UBpqaS6jd9qtwXU9hyuMZ2MB8GA1UdIwQYMBaAFJMX +ckUx3pJcaLY1+G9fTE8vA+p6MDcGA1UdEQQwMC6CCWxvY2FsaG9zdIIhcHJvZHdv +cmswMS1lbGFzdGljLXN0YWNrLWZpbGViZWF0MAkGA1UdEwQCMAAwDQYJKoZIhvcN +AQELBQADggEBAFLwNtyDygJbfgtFm0uF6QAKcuXit5CgbK+fVlX1IMDptEoACmtj +uduy4CdtOEVC35LpBrHD9cd4xwy/jbHk75tm462CtDAXiM9U5ie/POZmpeZHNnzo +tr12CYdrAdCrXowoA/zF1TimBlJKxHgD0X+xCGdRJ0WGTTvKxNqB5D71sfH3PyWe +Ns87Bf1bqlFViZbHGZNxcXpDSOJfLgFEpDo85XeSw0Z4AE64GX7qWfrNN+Mgklsf +EFUAxNREqzEbOXqqqqwBKM6hZBMkzuZFn4SBsjNQyUza0W1NPBopUwUuGbS6tt3N +SZgr1yCsNI0IsBlOAT4P+2J/W+G6feIUfDs= +-----END CERTIFICATE----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.key new file mode 100644 index 0000000..85d079b --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEogIBAAKCAQEAq5ZjBF350ytH1XkV9+Dpn0LU4tm8KjHqM3iiFCK20TewThqB +flf7sM8VhRytsql9FNhdEBPkBRFaWsb0Hdf8xcMdDgK38vwpjd63HqUDQhSOjh4y ++y/nXe1FDAviI5tCF8yhQ18FQHJMh98I2bSVYCx3JXB6nrlfyhAdD2t8g9p0BHIj +Fviy5rIM/UFsdqbWNY1llHnyHJsDQLsiNy0OzT3yvkKg+4vzCf++Jn6LYg81arjV +ZjOjqdh/u2h/0JwwFmeVZJuGgxqhufT69j1Npw8tAwcqufc4NUKCQubDrApX4a0J +zHzn3MqsCJ9EL5tVc+NMqOhzXKMPFVTmWLN2KQIDAQABAoIBAE2aTl4DQqHGyU46 +3TymdAKbbzzJzNgoiwuMW4FP0e79iLdKNZa2pBZrEgiJ1+Ud0nxC/pPu6wl/t6Wm +pXF55dBrVhCoGhnDAegv+hHZ/4c7VN3hupzwJWvNi5TPKw9/gHzTB3w41V84UnSA +4rfTfFtqwNgl7s8qd7AjaYE307CttbpVctIl8K5jfIyPAh7bVHLzleS6/Ya0toZD +Mzb0kIL8NejiDPNBiCHtnyiQDP9St2brbgsC0Z2Vfqyq9PyEOa32c9gcTcGy+WRM +EhVFvGT3gZBHMQL4AYYu14qNIqo5MsMvsZvZbGLldl6KSwgag49xyaaonVtEasnP +iP0imAECgYEA5bfwoouzK6ilv424aWLHZkh+GZ3X/vTCBApBWnr3nAZAGq77Wu3P +P6ZpP185rD6LA2yATS6RuuC5rvVzGJCn0vt/LY8KKD5+2/zWXp2arMxe5BnyQSFH +ECtNuN2DnJtwRof4W47T19z8321MOXopR7fAvP4Ke4gH+QRwXnqOoskCgYEAvzfj +TBqR2s+Y0WiGmuZKpTa3MTh5Ke8Zw30B9I9MZIwmdu+iA+IU6CX5Svji++NUL0jA +MYP51A2rzaUxbuyLoUil63lkiyDhL+BPrsiAwcokGiJsuN1/rnImR2ovAmFpGtkH +NW5HFSTkc6VWafiguxRS/OdxzGegWrGFOTJFiGECgYArYxRl/vC2PEIh7ch4zxlO +Lj7y46caFmxWiwFQ74y4wU12PLposCXGpc2XFIs2BxIGcYXCDhukKjGn49/7Mccg +yDN7DVsjwrn/Hr/2WtoN7QO3HVduCbT8TtF9KwlimNEZ4TB9SnqkeK6iHGibKoGF +dCVJDMo6DrVCyR3YGlm6UQKBgCKQ8MbGGs2qL17TfVms/ZtmC7GbGtQIw+iBxYO3 +D8ExUJa5dNks2kio7Kqv2SBdlM9DYHLS/6tkmUUAcrIxkoAiSNQLSrCXzf1AmEbp +OdVOPD55MJwudjFLsz2/pSXSBBT1XIc9Gx5oX9/D6J4Zcry+zM2o7PpdVTBv3Lxd +KRKhAoGAQDf2q8O0WOpN4KhA9kHVyBmSDBNUGWWLNdKdwCOE1TQ2PML15zeeiRn6 +QYnXY+Myp1jyXgn9vOynmm4EItftJYrTL1d33HopND24TCicgm3pKFwAkGLSi88a +EW7pEY7kMXI4f1Br2t+2m8+T/al/HoqYmuvPZxW+ItBBpxH+2x0= +-----END RSA PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.pkcs8.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.pkcs8.key new file mode 100644 index 0000000..bc52372 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.pkcs8.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCrlmMEXfnTK0fV +eRX34OmfQtTi2bwqMeozeKIUIrbRN7BOGoF+V/uwzxWFHK2yqX0U2F0QE+QFEVpa +xvQd1/zFwx0OArfy/CmN3rcepQNCFI6OHjL7L+dd7UUMC+Ijm0IXzKFDXwVAckyH +3wjZtJVgLHclcHqeuV/KEB0Pa3yD2nQEciMW+LLmsgz9QWx2ptY1jWWUefIcmwNA +uyI3LQ7NPfK+QqD7i/MJ/74mfotiDzVquNVmM6Op2H+7aH/QnDAWZ5Vkm4aDGqG5 +9Pr2PU2nDy0DByq59zg1QoJC5sOsClfhrQnMfOfcyqwIn0Qvm1Vz40yo6HNcow8V +VOZYs3YpAgMBAAECggEATZpOXgNCocbJTjrdPKZ0AptvPMnM2CiLC4xbgU/R7v2I +t0o1lrakFmsSCInX5R3SfEL+k+7rCX+3paalcXnl0GtWEKgaGcMB6C/6Edn/hztU +3eG6nPAla82LlM8rD3+AfNMHfDjVXzhSdIDit9N8W2rA2CXuzyp3sCNpgTfTsK21 +ulVy0iXwrmN8jI8CHttUcvOV5Lr9hrS2hkMzNvSQgvw16OIM80GIIe2fKJAM/1K3 +ZutuCwLRnZV+rKr0/IQ5rfZz2BxNwbL5ZEwSFUW8ZPeBkEcxAvgBhi7Xio0iqjky +wy+xm9lsYuV2XopLCBqDj3HJpqidW0Rqyc+I/SKYAQKBgQDlt/Cii7MrqKW/jbhp +YsdmSH4Zndf+9MIECkFaevecBkAarvta7c8/pmk/XzmsPosDbIBNLpG64Lmu9XMY +kKfS+38tjwooPn7b/NZenZqszF7kGfJBIUcQK0243YOcm3BGh/hbjtPX3PzfbUw5 +eilHt8C8/gp7iAf5BHBeeo6iyQKBgQC/N+NMGpHaz5jRaIaa5kqlNrcxOHkp7xnD +fQH0j0xkjCZ276ID4hToJflK+OL741QvSMAxg/nUDavNpTFu7IuhSKXreWSLIOEv +4E+uyIDByiQaImy43X+uciZHai8CYWka2Qc1bkcVJORzpVZp+KC7FFL853HMZ6Ba +sYU5MkWIYQKBgCtjFGX+8LY8QiHtyHjPGU4uPvLjpxoWbFaLAVDvjLjBTXY8umiw +JcalzZcUizYHEgZxhcIOG6QqMafj3/sxxyDIM3sNWyPCuf8ev/Za2g3tA7cdV24J +tPxO0X0rCWKY0RnhMH1KeqR4rqIcaJsqgYV0JUkMyjoOtULJHdgaWbpRAoGAIpDw +xsYazaovXtN9Waz9m2YLsZsa1AjD6IHFg7cPwTFQlrl02SzaSKjsqq/ZIF2Uz0Ng +ctL/q2SZRQBysjGSgCJI1AtKsJfN/UCYRuk51U48PnkwnC52MUuzPb+lJdIEFPVc +hz0bHmhf38PonhlyvL7Mzajs+l1VMG/cvF0pEqECgYBAN/arw7RY6k3gqED2QdXI +GZIME1QZZYs10p3AI4TVNDY8wvXnN56JGfpBiddj4zKnWPJeCf287KeabgQi1+0l +itMvV3fceik0PbhMKJyCbekoXACQYtKLzxoRbukRjuQxcjh/UGva37abz5P9qX8e +ipia689nFb4i0EGnEf7bHQ== +-----END PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.crt b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.crt new file mode 100644 index 0000000..c370db4 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.crt @@ -0,0 +1,21 @@ +-----BEGIN CERTIFICATE----- +MIIDfDCCAmSgAwIBAgIUO8hc+gvL8M0sqyQMvRfXz2dQ3pIwDQYJKoZIhvcNAQEL +BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l +cmF0ZWQgQ0EwHhcNMjIwNjAyMDk0MTE2WhcNMjMwNjAyMDk0MTE2WjAvMS0wKwYD +VQQDEyRwcm9kd29yazAxLWVsYXN0aWMtc3RhY2stbG9nc3Rhc2gtMDEwggEiMA0G +CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvJNZmPknCIzxy0t7Jo0sejT87ztpZ +69DYKWEOh4WQdRG2GIWFVC2Z4Fz2OoiQf+sjZWkka1BHswvTu4apfIBb9k+1AsYi +e6zIjXrT7psp8VBJBzY5CJCZMuVZKDLJSGSNajy88BJHzZc+EMOAuTA4fVchhsVy +XB15j/yyGjWIbzPo7LBtyThsid3H0BT5CDAmYEgOgV062icssAL9WwM3N3yW6jiX +0F7Z5+gy5pFFdpJvyY41/l85FOldzf/AQ0bWcjOrq+Nq7sf2Rz1Oec/3U5fSFRJO +P1YmsJBX/KFsasaxQ0RBc2lKLdCWWzQw/KR5e1RHOAPkErOhlHYQ8fW3AgMBAAGj +gYowgYcwHQYDVR0OBBYEFKIinocJiHh0u0qdk1olqnPOjq5rMB8GA1UdIwQYMBaA +FJMXckUx3pJcaLY1+G9fTE8vA+p6MDoGA1UdEQQzMDGCCWxvY2FsaG9zdIIkcHJv +ZHdvcmswMS1lbGFzdGljLXN0YWNrLWxvZ3N0YXNoLTAxMAkGA1UdEwQCMAAwDQYJ +KoZIhvcNAQELBQADggEBAEKI+MzjRetmXJvbxyNkQ7WVFOcW2J2PikV7smXmlUOB +/hJ7SfJ0JvM12qL3w0nxE03lO6TqILvRReWR4lzfHGHOBJaBZP6dn0+U616A1kaf +h9eLfsa5hoQ1aNTa8BAUYo2h4+2/m+w6p/Aj4Im6bd5KfgWFTJzDQqSF5MqsgH8R +VuQFQY8wW1azTn7OoktZPmooXQ0loDnmC/kIEIFMXxDPqrF8Z4cgxYI2KRpsY/l9 +538iiUIUXGTPy3CpIua97OWZa5QZyWOKkuAh6FPf4xEHs824CItR3yhsgojAlwPI +VmisgSEcubAB7L1xWVSVbwssb6ThBQckS2fX+PTEnWA= +-----END CERTIFICATE----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.key new file mode 100644 index 0000000..bd51f2c --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEA7yTWZj5JwiM8ctLeyaNLHo0/O87aWevQ2ClhDoeFkHURthiF +hVQtmeBc9jqIkH/rI2VpJGtQR7ML07uGqXyAW/ZPtQLGInusyI160+6bKfFQSQc2 +OQiQmTLlWSgyyUhkjWo8vPASR82XPhDDgLkwOH1XIYbFclwdeY/8sho1iG8z6Oyw +bck4bIndx9AU+QgwJmBIDoFdOtonLLAC/VsDNzd8luo4l9Be2efoMuaRRXaSb8mO +Nf5fORTpXc3/wENG1nIzq6vjau7H9kc9TnnP91OX0hUSTj9WJrCQV/yhbGrGsUNE +QXNpSi3Qlls0MPykeXtURzgD5BKzoZR2EPH1twIDAQABAoIBADKSRLCcbXabgvX5 +N9nGKWWNkxivtqcbYi/EGF09NXaF+zfZ2aqHUZlfw+jiGe0M0AnNMT3dX7251D9z +QZfn1zEbVmG9825pXvGOUbItnCxzdnnrB4FqGUH8bFm9UXgVUgZBuBRwZD1A8cHT +Q7Sd9N+NSfayDGERr738QADd4AI4sUD9OnGKi908TbQqTZUXnUWCnBKobyQ0LLoK +D1phoTfkh1lc5OOHdlr0ILqP5S/fdMaDYS4FJ+qQG3UpSGXV4OcW6KzeUWVWQej/ +00SfpUqYJ47VEmvZk6tvdIzuDprxL+n0GISme0MzgVDNzAtRvPtseF/yeQZ24hBv +5SaSFHECgYEA/WZ+8qvfhovqdJ18c1G6LE/cZpjmB4UFFXPV0gDC1sFPYrs7QAr3 +CaUCEqtaaIgifmzti6N8kVKxUtoF3p54aplYMfrbpOqZkkrvOl9l8kZesf/2SmP+ +QQ+Fe9n7CnHxT/xEM7R3NRzntHLyQdtXkiklu6uxaTGzcyOwKngK1FkCgYEA8Zjm +X0wU7gHLfEsdKbWK9w2eW8GELMiYAL4aK5W1A/X52Q+tTcVibqvnAPGehlJdd+N0 +Xue6wP5PO1CVNgC9yYJIIomd1HFgi/bvYe0CpuGQ6Ecb0hznX7wQNDN63YpfjO0K +Gh+wFVW7NhXeOgC3OUSKgMC2VfbsJQltmntFGI8CgYEA2ISBqFzPi6l11drTAb4t +c7txOYEf3AD/DQuDAgOAd/uJF3Wf9OLpnqYNlWIwx+y6fIgamRxCTfH4bjC4nzWM +8pjAUURl9Q431laM/rWQ6GjUdQeerIWwNGtMxTzGUnB1nsCQjhV/XjSqjvdApKEE +vHDIOwlDd/zttk4iMseLiVECgYAVNE5D3vGXUiEB77XHi19+/3r+oqVvKMvuhMDX +QnR4vIYJPw7+3GwfOocz1gEL2P7LHvN/wObrOWbK1e/CpZ4CqaSbI2ju1GSc5Ddu +aNbqvrFxMYyHjHHiPSdO7ZXDC/oG7GcOk+lodfXQcWrnvFhYdmORmVhngxyGw6UT +Ae62kQKBgErq4Ubte+n+1WM6MVPlGS4iVvLrtgHumXtdewNQ4ujlymLuIEuXs+0z +BcG+5ail1QnHDzm4Jx4fOSHDBOUuB6PMKlQg8Wdx6JA/Ej1Q5ljMDCn5MuhnJ9h1 +uvAZwIz2wzPiXDayWt1b0zFRuapJSSuqNBD7/yZhH9JtGJUu1r7s +-----END RSA PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.pkcs8.key b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.pkcs8.key new file mode 100644 index 0000000..25dcd07 --- /dev/null +++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.pkcs8.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDvJNZmPknCIzxy +0t7Jo0sejT87ztpZ69DYKWEOh4WQdRG2GIWFVC2Z4Fz2OoiQf+sjZWkka1BHswvT +u4apfIBb9k+1AsYie6zIjXrT7psp8VBJBzY5CJCZMuVZKDLJSGSNajy88BJHzZc+ +EMOAuTA4fVchhsVyXB15j/yyGjWIbzPo7LBtyThsid3H0BT5CDAmYEgOgV062ics +sAL9WwM3N3yW6jiX0F7Z5+gy5pFFdpJvyY41/l85FOldzf/AQ0bWcjOrq+Nq7sf2 +Rz1Oec/3U5fSFRJOP1YmsJBX/KFsasaxQ0RBc2lKLdCWWzQw/KR5e1RHOAPkErOh +lHYQ8fW3AgMBAAECggEAMpJEsJxtdpuC9fk32cYpZY2TGK+2pxtiL8QYXT01doX7 +N9nZqodRmV/D6OIZ7QzQCc0xPd1fvbnUP3NBl+fXMRtWYb3zbmle8Y5Rsi2cLHN2 +eesHgWoZQfxsWb1ReBVSBkG4FHBkPUDxwdNDtJ30341J9rIMYRGvvfxAAN3gAjix +QP06cYqL3TxNtCpNlRedRYKcEqhvJDQsugoPWmGhN+SHWVzk44d2WvQguo/lL990 +xoNhLgUn6pAbdSlIZdXg5xborN5RZVZB6P/TRJ+lSpgnjtUSa9mTq290jO4OmvEv +6fQYhKZ7QzOBUM3MC1G8+2x4X/J5BnbiEG/lJpIUcQKBgQD9Zn7yq9+Gi+p0nXxz +UbosT9xmmOYHhQUVc9XSAMLWwU9iuztACvcJpQISq1poiCJ+bO2Lo3yRUrFS2gXe +nnhqmVgx+tuk6pmSSu86X2XyRl6x//ZKY/5BD4V72fsKcfFP/EQztHc1HOe0cvJB +21eSKSW7q7FpMbNzI7AqeArUWQKBgQDxmOZfTBTuAct8Sx0ptYr3DZ5bwYQsyJgA +vhorlbUD9fnZD61NxWJuq+cA8Z6GUl1343Re57rA/k87UJU2AL3JgkgiiZ3UcWCL +9u9h7QKm4ZDoRxvSHOdfvBA0M3rdil+M7QoaH7AVVbs2Fd46ALc5RIqAwLZV9uwl +CW2ae0UYjwKBgQDYhIGoXM+LqXXV2tMBvi1zu3E5gR/cAP8NC4MCA4B3+4kXdZ/0 +4umepg2VYjDH7Lp8iBqZHEJN8fhuMLifNYzymMBRRGX1DjfWVoz+tZDoaNR1B56s +hbA0a0zFPMZScHWewJCOFX9eNKqO90CkoQS8cMg7CUN3/O22TiIyx4uJUQKBgBU0 +TkPe8ZdSIQHvtceLX37/ev6ipW8oy+6EwNdCdHi8hgk/Dv7cbB86hzPWAQvY/sse +83/A5us5ZsrV78KlngKppJsjaO7UZJzkN25o1uq+sXExjIeMceI9J07tlcML+gbs +Zw6T6Wh19dBxaue8WFh2Y5GZWGeDHIbDpRMB7raRAoGASurhRu176f7VYzoxU+UZ +LiJW8uu2Ae6Ze117A1Di6OXKYu4gS5ez7TMFwb7lqKXVCccPObgnHh85IcME5S4H +o8wqVCDxZ3HokD8SPVDmWMwMKfky6Gcn2HW68BnAjPbDM+JcNrJa3VvTMVG5qklJ +K6o0EPv/JmEf0m0YlS7Wvuw= +-----END PRIVATE KEY----- diff --git a/templates/elastic-certs/prodwork01-instances.yaml b/templates/elastic-certs/prodwork01-instances.yaml new file mode 100644 index 0000000..74f946c --- /dev/null +++ b/templates/elastic-certs/prodwork01-instances.yaml @@ -0,0 +1,25 @@ +--- + +instances: + - name: prodwork01-elastic-stack-elastic-01 + dns: + - localhost + - prodwork01-elastic-stack-elastic-01 + - name: prodwork01-elastic-stack-elastic-02 + dns: + - localhost + - prodwork01-elastic-stack-elastic-02 + - name: prodwork01-elastic-stack-elastic-03 + dns: + - localhost + - prodwork01-elastic-stack-elastic-03 + + - name: prodwork01-elastic-stack-logstash-01 + dns: + - localhost + - prodwork01-elastic-stack-logstash-01 + + - name: prodwork01-elastic-stack-filebeat + dns: + - localhost + - prodwork01-elastic-stack-filebeat