MOB-148: added k8s cluster for mobene stuff

4 years ago · 84a013d169
parent 0f69260711
commit 84a013d169
42 changed files with 2208 additions and 6 deletions
--- a/create-database.yml
+++ b/create-database.yml
@ -58,7 +58,7 @@
        - "{{ item }}"
      changed_when: False
      with_items: "{{ cluster_features }}"
-      when: item in ['connect', 'management_connect', 'keycloak', 'webdav', 'gitea', 'workflow_index', 'workflow_proxy', 'pdns']
+      when: item in ['confirm', 'connect', 'management_connect', 'keycloak', 'webdav', 'gitea', 'workflow_index', 'workflow_proxy', 'pdns']

    - name: "Add maria servers to hosts if necessary"
      add_host:
@ -88,6 +88,9 @@
        - always

  roles:
+    - role: confirm_postgres
+      when: "'confirm' in group_names"
+
    - role: connect_postgres
      when: "'connect' in group_names"

--- a/group_vars/all/plain.yml
+++ b/group_vars/all/plain.yml
@ -216,3 +216,8 @@ selfsigned_ca_private_key_passphrase: '{{ selfsigned_ca_private_key_passphrase_v
  
 prometheus_alert_diskspaceusage_warning: 85
 prometheus_alert_pg_replication_lag: 120
+
+# hetzner upstream DNSservers
+upstream_dns_servers:
+- 185.12.64.1
+- 185.12.64.2
--- a/group_vars/stage_prodwork01/argocd.yml
+++ b/group_vars/stage_prodwork01/argocd.yml
@ -0,0 +1,238 @@
+k8s_argocd_with_keycloak: False
+argocd_server_admin_password: "{{ argocd_server_admin_password_vault }}"
+
+k8s_argocd_helm__name: "argo-cd"
+k8s_argocd_helm__release_namespace: "argo-cd"
+
+gpg_key_smardigo_automation__private: '{{ gpg_key_smardigo_automation__private__vault }}'
+
+# https://github.com/argoproj/argo-helm/tree/master/charts/argo-cd
+k8s_argocd_helm__release_values:
+  controller:
+    logLevel: info
+    logFormat: json
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: prometheus
+  repoServer:
+    logLevel: info
+    logFormat: json
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: prometheus
+    env:
+      - name: ARGOCD_MAX_CONCURRENT_LOGIN_REQUESTS_COUNT
+        value: "0"
+      - name: ARGOCD_EXEC_TIMEOUT
+        value: "300s"
+      - name: XDG_CONFIG_HOME
+        value: /.config
+      - name: GNUPGHOME
+        value: /home/argocd/.gnupg
+    volumes:
+      - name: custom-tools
+        emptyDir: {}
+      - name: gnupg-home
+        emptyDir: {}
+      - name: sops-gpg
+        secret:
+          secretName: sops-gpg
+    volumeMounts:
+      - mountPath: /home/argocd/.gnupg
+        name: gnupg-home
+        subPath: .gnupg
+      - mountPath: /usr/local/bin/kustomize
+        name: custom-tools
+        subPath: kustomize
+        # Verify this matches a XDG_CONFIG_HOME=/.config env variable
+      - mountPath: /.config/kustomize/plugin/viaduct.ai/v1/ksops/ksops
+        name: custom-tools
+        subPath: ksops
+    initContainers:
+      - name: 1-install-ksops
+        image: viaductoss/ksops:v3.0.1
+        command: ["/bin/sh", "-c"]
+        args:
+          - echo "Installing KSOPS...";
+            mv ksops /custom-tools/;
+            mv $GOPATH/bin/kustomize /custom-tools/;
+            echo "Done.";
+        volumeMounts:
+          - mountPath: /custom-tools
+            name: custom-tools
+      - name: 2-import-gpg-key
+        image: argoproj/argocd:v2.2.5
+        command: ["gpg", "--import","/sops-gpg/gpg_key_smardigo_automation__private"]
+        env:
+          - name: GNUPGHOME
+            value: /gnupg-home/.gnupg
+        volumeMounts:
+          - mountPath: /sops-gpg
+            name: sops-gpg
+          - mountPath: /gnupg-home
+            name: gnupg-home
+  server:
+    logLevel: info
+    logFormat: json
+    config:
+      kustomize.buildOptions: "--enable-alpha-plugins"
+    rbacConfig:
+      policy.default: role:readonly
+      policy.csv: |
+        g, {{ argo_realm_group }}, role:admin
+        g, admin, role:admin
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: prometheus
+    service:
+      sessionAffinity: ClientIP
+    ingress:
+      enabled: true
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+        cert-manager.io/issue-temporary-certificate: "true"
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
+        nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
+        nginx.ingress.kubernetes.io/ssl-passthrough: "true"
+        nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+      hosts:
+        - "{{ k8s_argocd_helm__domain }}"
+      tls:
+        - secretName: "{{ stage }}-kube-argocd-cert"
+          hosts:
+            - "{{ k8s_argocd_helm__domain }}"
+    additionalProjects:
+    - name: infrastructure
+      namespace: '{{ k8s_argocd_helm__release_namespace }}'
+      additionalLabels: {}
+      additionalAnnotations: {}
+      description: infrastructure applications
+      sourceRepos:
+      - '*'
+      destinations:
+      - namespace: '*'
+        server: https://kubernetes.default.svc
+      clusterResourceWhitelist:
+      - group: '*'
+        kind: '*'
+      orphanedResources:
+        warn: false
+    - name: bootstrap
+      namespace: '{{ k8s_argocd_helm__release_namespace }}'
+      additionalLabels: {}
+      additionalAnnotations: {}
+      description: application declarations for bootstraping k8s cluster with argo-cd
+      sourceRepos:
+      - '*'
+      destinations:
+      - namespace: '*'
+        server: https://kubernetes.default.svc
+      clusterResourceWhitelist:
+      - group: '*'
+        kind: '*'
+      orphanedResources:
+        warn: false
+    - name: cus-mobene
+      namespace: '{{ k8s_argocd_helm__release_namespace }}'
+      additionalLabels: {}
+      additionalAnnotations: {}
+      description: application declarations for customer mobene
+      sourceRepos:
+      - '*'
+      destinations:
+      # TODO all applications have to be in argo-cd namespace
+      - namespace: 'argo-cd'
+        server: https://kubernetes.default.svc
+      - namespace: 'cus-mobene'
+        server: https://kubernetes.default.svc
+      - namespace: 'cus-mobene-nsodev'
+        server: https://kubernetes.default.svc
+      - namespace: 'cus-mobene-cusqa'
+        server: https://kubernetes.default.svc
+      - namespace: 'cus-mobene-cusprod'
+        server: https://kubernetes.default.svc
+      clusterResourceWhitelist:
+      - group: '*'
+        kind: '*'
+      orphanedResources:
+        warn: false
+    additionalApplications:
+    -
+      name: keycloak
+      namespace: '{{ k8s_argocd_helm__release_namespace }}'
+      destination:
+        namespace: sma-ums
+        server: https://kubernetes.default.svc
+      project: bootstrap
+      source:
+        path: config/kustomize/prodwork01
+        repoURL: https://{{ shared_service_gitea_hostname }}/argocd/k8s_keycloak.git
+        targetRevision: prod
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+        - CreateNamespace=true
+    -
+      name: filebeat
+      namespace: '{{ k8s_argocd_helm__release_namespace }}'
+      destination:
+        namespace: kube-system
+        server: https://kubernetes.default.svc
+      project: bootstrap
+      source:
+        path: config/prodwork01
+        repoURL: https://{{ shared_service_gitea_hostname }}/argocd/kube-system-filebeat.git
+        targetRevision: main
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+        - CreateNamespace=true
+    -
+      name: cus-mobene
+      namespace: '{{ k8s_argocd_helm__release_namespace }}'
+      destination:
+        namespace: cus-mobene
+        server: https://kubernetes.default.svc
+      project: cus-mobene
+      source:
+        path: config/default
+        repoURL: https://{{ shared_service_gitea_hostname }}/argocd/smardigo-mobene.git
+        targetRevision: main
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+        - CreateNamespace=true
+  redis:
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
+        namespace: "{{ k8s_argocd_helm__release_namespace }}"
+        additionalLabels:
+          release: "{{ k8s_prometheus_helm__name }}"
+  dex:
+    enabled: false
+  applicationSet:
+    enabled: false
+  configs:
+    secret:
+      argocdServerAdminPassword: '{{ argocd_server_admin_password | password_hash("bcrypt") }}'
--- a/group_vars/stage_prodwork01/mobene.yml
+++ b/group_vars/stage_prodwork01/mobene.yml
@ -0,0 +1,500 @@
+$ANSIBLE_VAULT;1.1;AES256
+38393035306261346134383162356566326337666661653966396532303666663037663163396466
+3931326461323966316431316163323061636163653863390a643866376430356463303565366230
+37626438636366626162643833613035373532663530306461383932666638356633613166356363
+3234313739323864610a316136343030343464663066616632633561373730353334383337343439
+33346364376339316535633261323465646661626337383166353936393964333738613736303434
+64316237623236346631623333383835313866323035623364623531306335653334626339366636
+38303535313965613464383534636435646261356231353339653436323639336532383862363162
+35383535633665613464613238653330643666616436643130663666663631313762313733363064
+35316665366136356264666336376361336565313632386663383438626633633763643066636266
+62396435343236373963393565363165353566613830336639366433313635633736366637346236
+30643262656132313130306534366131363138396565366462306236366561346632373837323332
+35653561326530656438633836393133376435643430363633663866633364653034666232663034
+30363862653536306634366237383135636466363231633462363538363465323037333036326335
+66363964326563336135633266333732656130343336306534313334616134346661633133366262
+38326637613730616439316265666335363239616630363234363261636564383539343662393961
+39643338643066663663383736333062363436373962623538356236396364333064336164303033
+33313434643835616362366363346438326533393766393235353835346238316537343666373839
+32616631333236663162323363643333323535386230666166336365343262633362613961653930
+34656330323763373461346464663166343833613066353232633030623130393036383162306562
+66633139303861343965373463303261633633643665636262323461353134643765393930346431
+36353364616533313064613731336438386562626164656263356635303634336434346564626535
+62333132636433396565643836643762663762373637353739333631623434656463643739646633
+31386630663861303934323162363138316266663936386333373730336534653631366261333733
+34373437393964363131653630616330616431643362333431656135386632613034616635663366
+30623536333834353731373831353161343564373239623861656364646238363131386561643031
+32616234616133346637656161326337346163313131323735376362353363353261323239376264
+61626265373766633836643131323135356338353762363039306638346432333162373436343761
+65303437653134626365383562343639343231343265666637343163663232663535346564623661
+34303931343666643966316437306339663466323865386562626266343133356331346665623866
+31653364366662646666316161623237383431326335306661323536663637633938343736346434
+35373738303335376637623466336666346632343938336264663062653833366638303563396166
+33333065643935343964303734303465366465343832316365303231356337306132316563646264
+30363161363739323465646466393435636539663630323634633034336265333064356231356563
+62396236363337633230663634353566653230386366396331343262653762626666363932326333
+34343866353831616232336335663861623864613164333864323938353636366133663365656431
+66373162656434333236376337313830653035663738623564373961636337343637303631643436
+30396138396266663364346337373637623763653539376430613431396535313632313235666339
+39333765326536343034363464366239383935636464373232346239383631353666356533346331
+39663238663431653036656535613131636262663536363332663234363066383262623731386235
+36316133623566633836393630643966343261393532653835386437373937303631643635326337
+31663566316530313238626330383532653334383236346337333534613431646466633832313765
+63613937613537663137663935393337666333346466353466613138333861663064626434643637
+64666361373936393434346463366635613031623263343739303765306539363133353836396435
+64396464303139613736396361343231643937643861663163613736303466306432323762333865
+33383665663037303634376530343630646135623237643865653934313864363936316536303163
+65663964656632333764656464323837623138633964336435663133646234343037313065643531
+35643739653238363064613636373032646337363865306139643437373564303238623431643035
+66303561306333373534303630633461656265333231303731613634613533643264613830343733
+32643564376333363962396436313533666339373662343365653930643131313566623735623863
+33383837316433366562663966353261363639306435313261636165316566393964316438303761
+39386264323562646230616137366164663465363961613863386533376266303538316238373663
+66326438356464633065373139306630626165323664346165326136346335613935393632383164
+64326431656233313036346463303136653237623236383930353033636536653338613033623738
+64366431613363626563376331313736373762373863323563396335336631623732323330656566
+38643636653466616162643264643934373739383263646538323039636537393934626265653930
+39376262653533306163353663303635396666666337663337623039643464383965643234396635
+61613931326633656637363132396563613739323362393538373636373731376231303734633835
+30336538616632333539663932646465633039396133366136323637316163656136646339323266
+65626239666538313231323336386662633134353235663132616265646166666239636338356263
+61303437353930616437633465666534656434303530393766393932353235333532373339373834
+35303631373634636437396633626530316461323863356362356165316533656536623931656563
+61333330623439376137336464333561343961303835323632396265346533336532616135653731
+34396561343562303438376533623738383334646439636634383431316661306435633161666363
+39306336363464646137626165386665633738613932643563656463383031323039396331326266
+66396365346331303436353565616532323637363563653636643934303962386435653533373030
+65323531363830326262376236636236646163656139363430656534336332353262623330643631
+36646539383536393664653932666534653761353966373031656363366138386539326135383234
+32346163366432373163373437323039656161663238326563313530656566343138653238643564
+38396234336332653861623038306663363630623139303736306131643465653237316266336461
+39303932313663383965333434666362373763653637353064316661643939316431386561616238
+64393938306236323736313131616132393631663761623935643065633432306237346261313631
+61656230306236353964363035623961373638333131653562326163303633396539343461383065
+33343237343866393561653834363261353039643032633964373931666461653730613233666334
+30333734383536336635393461626130353735653566633435613332376637383031643935633736
+64353063386230393539643534643932326336343239323564356330323034626233623136383462
+63613066376638643030336463613836313135613732336334613337636161643936333632393065
+65616262343062316465386633636661616331343434386461393936666661636366383663376633
+65636332613937353262653766663239346334666336323164363734653961303262313662336165
+34646162303934643834663261373833666666383031633333613064306466626263646639623132
+39643737343461633536636331393135303132666431396565346530383731643365613461336664
+37373665396532353466663537333833643835383263316430306665323366353830396137343561
+37313032343866633635636135326566666566323436376234336364323330303033323230646635
+38356664316139383233633134396631346232366639316330313436306337306665663534303362
+37356235616465356532383337333530383466346638626563653138626538383761633261363266
+39646264386537656264343766313137313163363732336137313061366336373062333336363062
+35643632343264343530376135346530666531623261393133623435316366313465343561636535
+62646132366139653462656233363834363262646663646463666530383361646461633562616564
+35643632376237656364646662343866663131333266306639623538356361653635316564616239
+64613031353236663136303763653634323562343164353636313938626139366466653665383830
+65376335396531613166303130366437386166363034336337343833643037343835643230636536
+37343330373535633233383139356437383465653561616161653838353364643264643365313964
+34656261663962323639616166623561316130336562323333303665646230653537626435333537
+37393965303265373437623531396534323162633661613132633339316337376234333666363738
+65386632613965343534373733346535303461363130653665396263386337303534643461616465
+34613636366231303930326266663261623161373634306263376332653136636332306532346639
+64626666363634346639653835386366383138396665653234333539323536316664613332323161
+33396463303330333031623938353533373939346535393961366139613634363738366138356437
+30633733623564633134383366323161613064666238316565626362353935643363616338393562
+35383939306666373438663837383137316263313665666637376530383065356638386636343863
+61303635663434393538323639656132623562373062303030303030366636393261333865313636
+39646136313866313830346630643133656561356162616635366236396136373538306335373533
+66393034623535386537626636336531376138326232386238326635326638353734646563376665
+38386534643063313565363364393766383635376132613736323165326131396364346665323765
+61343137663365363365333534623338643263383733636661376632623938636132356231666537
+64353134613862323531353066333635613133656465326230346162303031386561666664343631
+65316531613863363735393664656536623236636465643737323939633839633833393364376138
+63363437653663633135653838323962626361663163326661616439653934666238613930386265
+38383732626333393235623638383764396665653230636431633361663531383561326562313133
+33626338376464636534346166626464363566343936323436333938653335396563363930336533
+61366461656434353532613363303438376639653935373266386465663434346635303563333435
+37656263376435333038333233646638396436663432303563323236393330616131643662653733
+34376639353939393838383435663934333064633132373363373065643939336633633461336631
+37343361306531336362643735343931613865346664323433656631363335643330353437343733
+36383130336233326335366132643534373764353930376530313934356530303632613539326665
+63663330346262376333613431613334656466393436353132373030333636363234363462623866
+33643136633437376364313539373736363962633938306663303564363836373031623133343832
+66636366366632666566353564633838393262353166323464383331366162633561623939373766
+30663034396539333236393130613534336238333761343164636231306661626264316331353432
+32366263363137313961363337626335366265663263303361396336333034346632353136386165
+30336564643335633264383362396230306635336362363464633631386265303562386261353066
+36303634333336373761343963353733633632633962393336306663633862613134396463656237
+64363464383337663133383965316232666561323864386331636232396138656364613062303266
+62303236313863346662336161306264336266636431623238306530636164313866313939346265
+36613564336263313938333030633431663564336438326438643333313865343738303637333436
+33633239346563323764386639313737383736316134643662396433353338663936633931313430
+37363733616534363264333437356635303935643431633335633538623631326465383864303237
+31353663306366653333623566663266663130623130393665363834643561653961346464333264
+61363631636436393236666362613130663037306330636363623436353861316363666364383264
+66383435353239376331393937343235366562343433306666306365646330396133313035323165
+32373831306337373236346361636465356363626138356161366466373734653465663230356532
+31376663313232333662346530396639363334353330333830356235303430646539316366323863
+33336436343066383564376132326531376266373730323535303066633532303663663638396630
+66653235643937383366633764653234353236623133346530326433303534363963356436353565
+35303332316464343866323361316438303538643935373263663131643237396463323137326466
+38313162653863303365363235623537356530393531633862356465326436663763316436313434
+63623763393532653934346264313039366461643238313336613639646665353030313830623435
+35376533613837343032623431343564343564343637343862656137396333356364363435346662
+38396534666663626131633835613637383434616431303833653334386435616463636562366164
+64333166616334336365376666303162386630653233656337336436653365306636656233393037
+38343161376466656563646463363664623363303035613661323361326635393232646430313534
+35303663323662373134633162646436636233333464393639343034616364323862366139303336
+35636533393137333632633262376263616338323638616164313838363865656164663861366431
+65343230343564656533616334656234306432353166323564653131306434376134303632386138
+30336131353437643663633864303439316232373861376565396664636266613966653334343732
+62623861643038623234393431333434363330346536303733643534643666393933353335613664
+37666537633061343035343731336665633330303930326263313231356238313964663134656338
+63653731333861666231666131643031346238373038373833613036623463396362336564633465
+31343565636236613432626237636433633830393934343662303232383431663764356634626230
+37326439646132376230363266633437396161313566316562626332326132323334636339343534
+35303561666239643434366637306165323463653264646462666636323361653635363834663464
+35323961383066376430613130313863303338333562396663623361353235336533313630373535
+65303863613932636164383764366330396431626138323966376234636265663734616336383334
+39376436643362343262616230326366303634626131646564343364386139626463623765653934
+66663930323137663061383539663738646334313138363861396337663366663361323833356231
+39376165333133626337303663303763366331306533666135313134646466343166383435663837
+38626136653430336266343339386238336635656266353866613831376561333832363936653138
+38323131373338313065336166393832343236343135623635353966643733613339323934376638
+30666430383066373930613237313239356564303061313430393032393933343561646635393465
+31353666623236613139346436613238396462636335363434393837303464333166353761333437
+31393438373063336161633032623430663539376334373066626163316635346666636136396264
+64343236343738636137613933373739396636396366626463613530646434646466633830393334
+66633435313732643831356639663961316266636535383735353131653834656433326561383934
+63366639356264626232373634626130613035633432356534316432653262626637636665346639
+30393936623762343663316237613465323565656336363264353363633662363165626539363238
+61313461323835336531316231616135363635303566616663613531623730323933623462333034
+63376435346465616661303662636265346465663065333263373530303234356134643238323864
+65613765323165333062386661303863373437633463353231333061396234623935323135383434
+33383533613530653235343565303562656165663237336162613935633061376236646564306665
+39653030373938653566393933313832343738383232666631613137356165306664383937346261
+62653565386337373966666438303566613065373737383937303031626266643933346335303234
+65363463393562316237663130383665613635393235383830656462353139646332663835313739
+30373535306265623230626137376561623063663037626439363834303531343839376130346233
+31663266666132333366366634333964366563623261633938653564366666326666333565613635
+61613135373466626465646637636666643363613432353165613834626561326433643863383966
+37366633363565656632333262363764363338613063636461663063353634373131636232656339
+37623030656562316464656464343337316138366336376436393830356434333731313366313435
+35366163366161633965363263626362366163396132383939613463373139306634386162366231
+62353563383466363833326264613731376464356336643066616562323732326630396665313364
+31346639333561376564353437323765336132373139663262373263373264633465666631366139
+63376466613466623131393038623039396330313333663939623663313762653561386530303165
+66333565653938353135353530326132643564336532626433633535653039306332633731366635
+63613738353163613535306464303336396165306638366561633833356365363432383163646166
+35613465653535656632666565636433666261313938373537623936336562653732376434636636
+65633761623939666138353964616537363837643263386666613163303039613737633265373265
+36663736636134623431316264383430643331333839306132643631643934303464303762336637
+32393263383833373865323439373837623035393633393131666664323566313633653233343361
+31616466366564303662396561646364313334356136333332343931653132383130333365663762
+38363336346664353766346665343962336139306432616536323336356431356662353164373436
+66613463326639316361336530373337303564313139323061363136353464336665396334646333
+39383937623839643539316139613663373832393139386231333164373961633834623635363735
+64616366303739363366653934396535633361626138383633633862633964306132316333666530
+66623135643033393538626639623737323331363664663563646464326439636335343037653165
+63646261303764396266346362616561393738386136643866316630373538646331643837303930
+31646538313961363064336166396166383938643335653862383166323532353461666461383737
+33653337353637393934333566356261323937336336653830666164373262343065333261313936
+30333362316137613962613666313938653533633833323564366332323866366635616166623762
+66326235313630663162333038623765633235636565303166373337383138666334363334386663
+32326333383132373966663530663130373263343662616237323435343566636230626639366163
+37313237386663653636643031303464386336306439633866306363353739333733663563663937
+64363062396565346230633331333039306466616264306630333032323566366431346632643263
+39323734393031326666313861663439383664343534306639616165313065613163393632323937
+34313939653038316436626139663566643837663838633866616637356231666161393263396161
+39386433313730323237653637623839303732366531383637643832633234313866333633303563
+34336334393630313862623536303035663532343137316266323931353462346634613464343761
+36396166353739313664666535306233623831313630396231396638623838373736623764643939
+32333838386535633039326462386535386637376437653138353834383266313432336332633034
+38633061376439383163356237316639653230323634383238333539396435613661626139643938
+64313132326633303266613138636436616337363263626438343832623064363634646636333131
+37306636333362363230356661363935623032313533313366663764636364363834373236653665
+34396266396334336435336637666631616166646164383032383861383464353531356439646331
+33633365663836663634636666393636373831343831323166316636363365393036396538646533
+66396438613266373266363035363338613130323734336538663564646537626662616135346334
+31656439343133643563653866393033636139623265333435373538373136343264666433623232
+63383738353736383530303561626439633634646239326436613937363038353030343239363062
+63643739626365653832643934623366373936343139363730633434303662316637616165666538
+39633563366365346439353130613937326530626231656638666561613933393338313266343961
+36303033376361663339363430653965623566326632636637373830366663643039363863396164
+61323765353263383862616238376135643235656130666564663065616538636335643939393862
+62363330383632666561333634666437306230333362356438363964376465383335383138656435
+35393139623262346162666364313434633061656539623931636636353364346361396134623737
+37643130663031616637633137373130376139666434316364393132666532666339643439636330
+64626639376338656333623132663335326132303065323865313132363136343434383734356564
+66633137623266633932303730393637613538333932306535623065353034373733346138386338
+31323435613139313162613635303337313732376535376131393735366334656465373831343865
+63626531653130396239636166363763383665353037376236333962306238353531646265373335
+61663439616436316563643533643165656262646162343462353966623734663031623636393235
+35646435633138363131376664373663396239626132343165393061366366343732653734343938
+35643465663835656434633862343861323431323164366665643832326263356334393366303337
+33393136326563353735343336616338343165663532623036656666353432373237356334326339
+35313732313135303963663733313261613236313732353262346266333566306262316437623666
+65306532383565313337386661323332613164313664323639383331663534616130616361633334
+31306432373363643733363038666233366333373432313336316636363966633739373838663537
+64386463626561363563393864613935306434653934386531323330373562616130613263633734
+66663539633732343665373534323438356232356238343434613163383233643163616138663336
+34626531656566383764663262363736306165333536633265353133333363363935353031356262
+63646530316162336232316333636634666165393865353462653338333834383764333539363231
+64623731333063656665623466633834313030333964643138623837666232626365623035346333
+30386233376662306539376631373234323233303633313462343564356430303432333864613731
+33386534633163386330376233313739633336373735383238643834643666633363653063386464
+39373133613633306537636332393236613231363466626662613537386530666665366263333366
+32653266363964643862386634313230323661373366366236376136656231366432623732623965
+63396232663439366261633165383161336431393866363238333137313361613736623936356164
+32623531353062343732356461616138393163306661336165396162636263666638643535306334
+62326130313034366431636130346134343039613637376162306431623163343263333432363561
+62623733386464363736663061653332366434643838363231396535623337663439623265623339
+66643731393137623163633633613431323136373865306537356565616530373366646134363733
+37343339393636386361643230336634636137366130333163663236623063376535326166336135
+64353163633137373761663365613138656638656132376563623334646639316432363765656434
+30353465353537393439353636326537636133653132626537353665356235376533653733363538
+30363636323831346663356161373032613430643833363762373662306334323933323262653539
+66376632313430663365666534383565636663363033373039356430336363323065396664323461
+31616137346530663163613239346363393730663564636261316335333431666664633338356562
+31323431376238326265616265336461323037376636613064343836666262626132373539636539
+31613263653665396161353738393161653163613939613963306234643339373134646565396335
+31336333636639336663663966383662326661303631646165326662383330306430353136383463
+30316634316162663430343037393236656332313134343134383262396265316634396531643738
+30666333383633396361323765323961636565306338653530356237626138663765306466333836
+33653762306163356163613163376164386633306635353439626166363331393535623434326464
+63303130316432363265613031303738643566633230383436313661353565616235323966646635
+37613965353432303966623234643363373135346364623335663633646232366532613135636430
+36346335366635656635336538386238366533656562623732623865383639353737343266363662
+31343038313730643464336239613966333934633936626662316131633738383237346232666635
+32386434343561343864623361616334616463316163333962386237633337346633626163646534
+32613034333433343236626133353265363962613861656532366537613837366332316531303362
+30326639636437376163346664323661656530646238633861666437656366356564666566656235
+62326536393963353733353336613839643431336134636664396462383763363237666533636165
+39363636363736313764633761326165316131303539373536386139383666633338633235623535
+39333731613330343130333663316530396630316339346332313131643531643032633235316638
+31383530366539316634656139303133383036383232323134663963386538636262343939353837
+39393666326264616434623462353561643938333433626531393466663230356531613635653434
+34353533653034343831383030653331326135333634373037353666623031383538376535353762
+38336262303665353038633638306638616364326564333239643437616531363663323235353935
+63373739316264653239326236333562656537376332333135663163636335643835356233636330
+33646330333632633939326534616163386264643630316333623134383736666432653835313965
+61366565373133633039343938306166636264383564353262343066613933363365323233666233
+36313234343865666634656362626466313631663237343463386265333338656531326665653235
+39393264663832363830346434386465636561323935633639383634633161643733663431363637
+36623738336136383365316334313835363333656465353065653131666537623866646336643166
+35373030646165383739326563383236353863376437323335613862626336623230626439613465
+35616633376135316464613765333132623761323161643639333731326535316663346562613733
+37656336383664326338316137333639393061386462646336303936643736663339663932626365
+30396465663938333336363461393636343435336536356664613734633135366666623861643064
+62396666666233366663326161353065636535366561666362653937306538623762353963613634
+65373364666363616263383166366130316339373338313231383637343238313731333735633031
+35646336633464613133613832343339636338376432646336343463323839313336393139636663
+35363931653165316330616336646230646166303966363634636637383736656439323032383132
+36626562363236663431353733626464643230343636326237323038393130613337376264386161
+63393563636532353833366539376539373837386566366261346338393964646264396232386439
+36333436646634666539643036616530613964616238326262383530386430373765363161346461
+64386365376131363139613334356138316533626366666137316166383636623963316662333464
+39613133366232656230623538343163323763333931303133656363666362376239633938663230
+34393032393631313937386336313065656638306237353435336332646163343330326332393136
+30363038386566613938346262656630653365383639343330353762306539636263393137363366
+30393136343032316164663631386163393639353937346637303565643665653038653664346466
+66303762623837336538313130396638333238653737643439383662396239313338386132613835
+38346336316635623030633863633431303462663563306632323930633731623937663761623335
+66353733633236613432353031353462356163343364393563373236386338393736346438383865
+62343735393861393463363064643337326136346664396430313839616438333337616236666136
+37626636346163666639346435373036333962326137646139336530393436633335306235626132
+33313930313531643931333331343664346131663433313834333033396361653064396439346262
+34616635366237376434633937653865616136653463646339646137363365313530663033316464
+37613133383861366164373464326335386432653563663562316635353533626562393532616631
+38666338643135343735346232656561313638656537393231383635343262643530353438376566
+63613062396234313639393863633765393966383838326562643539316336653937643238356633
+61366235313964346262383365313366383564613732383064393665386133323538353032613662
+65376637646263306431376235336163373931336635343633333432383832393932323463366363
+39393830666161613939626237666361323362356332396332393765643964336433356261363930
+34643131316437303634653565386633656362636663336263373362366265646133366561353433
+34616562353030373535326265353537363438353930636135303037333566363030343935303134
+32316231363538633662666337343564373465623739303839373139313734343831333164303439
+39326433643861393330643530636530356531363331663934646332623535393066323639643038
+61623664363966396536643330653636633733333536646666386135663739373538336262666661
+33643161623132623632373363353536303762613361666361303164383363306533323539626239
+66643133343864626634363062373365333238326265376330643932313533666564616266343730
+32646637316364373433373236646334333964353664653133616233663062333864353636633063
+66643464636466333635316635333865643635646331343438623734613865663338316336386536
+37633337313266303461653661356564333861373732613730653036636331303462376363663737
+36633438393034643932626533643330363765336537333562643035333866396539636234386663
+33313632323737313536366133356635323631636131306335616137643435363433653633323264
+39633839376366623466643838393334663565303632343433623562323834326132613665373162
+66313061303465613062353238623962303132636231616530633832303634346335313566363964
+34323866653862306261626531383363313438616265313532613965613139663262336135656631
+32393662323661633233326164363131303163393463366533373334633864633862663463343832
+34316261396533663733346437623837313538653236646162383161346261346563383534356561
+34663336376465303561666232353232333234373163333635376237613234623836323035393461
+36643634303337633033633730396262376164633639353963333034633962636637313538623262
+33613461353331336430376537623839323764633666306236356538326164323737633865613663
+66393132363562653666303134643263653165333939383831336232393838303966613133346135
+30376464373431303963383832663364316130366531373637653834643437313637656662343834
+32623932626164323239313132383562383933353430353330316434643865346662633864363335
+35633163333236343137636534313964666463656663333232303639336163386336633764386431
+61313566303131633162333539376333376563343436323362623661343164346562353234306138
+30343937353331623436356234323430386262636635346131366462363334636661303962646364
+62613066346163363766646531323239636136386664636562393564643261326263386138376661
+62323261393264383136366330353435623139616432333061323430616462313034356232323664
+61623532643330653530323735636532356335303637626139303464663734613233653037343533
+30616237363163613838393262386236323565646636353563373339333534373833613762326132
+34346230303032366339306430346437326536303139396238383165326530613061643563343265
+32326534346631303062313465633232343465393937303262366131633839346465613233333436
+36626663356461326338616637656336383332353665396133383666343664333535653634333037
+36323138613438626530313565313733613166373563386132663639323539393366623338323663
+38636137663732353739393136313338663764313338396634343332306430333831353235626565
+64663938643964623439376261346665653062613735663431653233373037646132636262346561
+37333962323231363466636532303639643031653733663464336433646163316637653430386339
+37373037633564353563633762303263623634376238306361636263373462626431383730626631
+62303438613437336462373437643631373039653534346265326266666632356237306538396634
+30353033393163636239393663303431333335343436323563656239396132626136373961613435
+66633539643638363734616162393934643061323261333962386531323933353463333433643932
+33656563333761653662373335613839356634333532303633386237366234613138623965306335
+38376635633332376137643366356339623561336361656563356265343133343034633536383035
+62653864366330616365623930363666356634333461373235303364326264666362333462626137
+35396436333533343138343239363435613061313065613838383966373939643836653062303965
+66623634316131333735666432343830313937323864663330643436616537623132376162633837
+65626631653962343166303338646138666564653261633631363531353263386337613836363064
+30396635626566623235643063313735656534646533333836633933633235383163313166613635
+38616531376534363562316665643764313830346336613530343632386133343039643064633764
+61336133366232383539653466386665373666356131623165616166393536333935326631343862
+38653938336464376639636664363034646134313762613930666261363332623837366630376230
+32313963373738323639646661306235666437306330633465393234613339313064346661386661
+38613437303936343537613163393837643166343636326335656536396335656564366437623535
+66666332323161373430333735336230396234326230303336366561613965633163336336643266
+66633766353831626439643161393835643636653564613238323333636265643564366237353335
+39656262656237353864653338663334303436323066373839663365626563383066363634396238
+31376662663066303364323639633634633136653134653666623234653239373064653262646130
+34366565366666323037633738303237363465333232346536363466326238373136393363343166
+65626466336639386139323166616336346537353862376536643562636662643531353165386133
+37376332343333326366303761346639393261323534643965376564353032663861353437313330
+63633961653730333863633034613338666335306261333762333132393236353331633338356539
+39306533336265646133373065643238386538313238303830643837386137316461323363666433
+33633562346465373463383264613163643630363862376566613035643961343232333331613938
+34643662353965336364656531303839313266663061356338333963323661376464623134356530
+66383732643265643366623265633331366135623934383133303938373131326163643761336135
+34626466346634666164393038663736616234303362343065636239356531616534636161653364
+62656631666534333739303231633862303330333165353736316366636461623932623138633564
+35626165656234626666666330323837383433613266656236643731386333616636623733613831
+33326262613161356638346664393230353635396234363033656632346434386261346262626335
+61323265303737386563353335633131336230336266353932333761306435616362343335613939
+33373431633261373135356337393838626661656433643338623361643362366561306338343336
+38376466613034366633373233326562373832343232636362313630323861363034393362396165
+31356539656462376530373362333263343561383834643265383261376233323534366133323762
+32383038333038386433366334346431333435643064663566356266623237393533626431623361
+30306534366530363865303039643032353731343334303435363639326632626239633062633562
+38323539633932323332646463396165633333393738663730396237373864396634643035333734
+66366237623330663335653162373634613565633033663566643964373436313533656566313934
+32613736366235396237326233393532653433616563633364656365303364623931613561626238
+37306537373330366231613231353835303834643066666132343332613361656365626432636263
+64636237353766663833366339316631343939626137633138616335633139336438303038306339
+35623666353939316539346333366631626433303332356465656330323964336463373737303638
+34356464303437656364326266623134346237643061623365346361363564366134323164353835
+65396232363931316339393737616264333765323432383833383065333838343331363934666334
+64333164376430343734373362376130613433323465653132313665666365306663323166306239
+31333961613839646466626663356235383361656462393238346566646637323438326335386165
+35363631333332663332363434366530616134663663346537346434343666636336646665663438
+39396235333434613932313539313833333666353366336263653137366363666530303632323865
+61636261353564396230623261613965353530326533336634393338393438343863396266396234
+36653731663035373466346131633038666165616633623566383336366264613061353934653737
+31383734636231633335373465633236373236633133316364656462396566653539656130306133
+33363266653766656530376433393738313331316565653930646266386262383431663236323161
+34666633653064303835313864343736653738356333346164653433613333336434663666656235
+32663131346435383037653335373061633437353464306164623938613737366337373133643336
+33363335356134303561303763323635666637653639636435303162366562326337666139396463
+38623531363136363132613630373036633431393433626432326439376565323634653531383036
+33333030663032306132383661316661633463633163616266343335363061363434376436356339
+36623834613663393566326132336361663330333836613633663239306636613032613039633763
+30303530313539666137396332303437393735333037663461313863666235623039323638396138
+63353264386530646231326530633562353737653762393538363232653439653264363162383362
+61316564353733653463306564333931306462373037346338363863333736363532623932343262
+36653365373438666530313162386338646338633364396636663137336338633735396636633034
+34356638363633343537623565353562643335613361643737356264363535363662373032613865
+65666335343163373134376233316331343336383334613130373739343161663361323039353330
+39663939386431383134383263656434303464313639663438663237666463643063383130616564
+32313266393831396130363664336438623939633261613138626135643739346165363336653637
+30396461643131656135353131636462376365333564386563356230393939316530623134653336
+61306363396334633035383962306262633836336165653639356266323434636634363932336634
+32656462306665393031373539316531353733306134636363383237653261633265363339646631
+61643764643235666339353963623630666339623365363939613639343262306666653033343064
+62383264393762666165333937663164643861303661396264363333376635353834303266313533
+31323132343333303630653033396563303938386332393732323736666337306233653136626662
+63333435616239343662366530353566666231663232626266356536303137303464643464646465
+33363461393064666564323761346334643134643933373739333863373964336536303766663932
+61346132333261343661393138623939626236376230396131626665636562623739356433663165
+38616265316538656363353933383762623761323564376465376533666136363931613035613137
+65373034383236376531616162313566656634323564633639316330373362313034646431323738
+61653331616536623538313830383533643361356435643861383533376436366431313032306664
+36373038336439343666303536336264353838383530663132653434373132333130643035616134
+30383530626337393030613734383231326566646166336166393134333965373563313430326463
+64656239366437323261663563653265343862303462653362313435303263663631333964336534
+63386133386639353666633765636161636538343432633133616162356438656162393565323636
+37633137316239363464353732333765353831646364653466366437323633656262313930626639
+32346536343432343837373635363263313032656333633631613461393366326566386436353837
+62323331396636653432303734643966623162353336346362343862353537613764323265663164
+34303138383237623234353364373030353261663237656431653637653861343532396165366136
+38366138353936306132343765656163663863363561336430373736623538396135313039616538
+62323363336539623433366661393936346161353366366235326635383764333666613135626339
+66643561396663656562336665353135616563393361646332666632616336373061316532616465
+34323966353031613631363734316230633266383638356239383262343136663030623830343263
+62666339626135396338613033343562623737386363333566313466333432626433303339613433
+62393530653536633333326335353831356439386537383039623965336262383431616239623230
+63326430326533643834383233626539396236306339616262383631363765626632396630663763
+38306330323663636136626534643637303066643866393033336436636563613964343835643633
+32353263376333303537616363643630386632646537613063633162663637356131313436613431
+62306133383333666532636437306264363961663261643133386530623564313366363237626137
+33306635386564643562353466343136303130663234653938653539306134336363393430613635
+65346263323734323234653832333066303236396634366361336630306231386431306438333264
+64643030613739626363663064343066363634656233313232383564363166343766313961336635
+61353361653330333239343761663764353731613938643138396337326330303939646233316136
+33623561613366656532353932313835323339373565633864333538333036303566393537366134
+31353737376439386130643066353364356363626566626537343038643465613734326237656535
+66376365656433666164353836393230633864326535363239666530663061306161326361343532
+64633366323539316532633839343066643934613363373530613463656366346138666131333236
+32653636663463633632666234386139633461336539326261626463613633656665653334663162
+36643231613333323232373639623334303033326533313663613739363730353863353934336637
+63326634343332383939356562373636646535666432646664313266353532663637613539643364
+33623463333536613566333136646339663761643066303736643239663439323439626534306439
+32356338363163343463646565613539356562356566383861353033383961613233663635666139
+64333231623030313161393264316462346264613933653737636439376563303765396533383265
+66383631353931383830313234326461383265356561616563643638353332396236343031383234
+31386438666361303932383435643461623734313163633632373937366137333939376133653064
+65336364323264646437363236626233376365306537323766613931616339396665323563343661
+35613337393334363931303537396637316137343137393963653637383763383830323762383062
+39343031303730613035383633323634323833316335653336343165636264363536303462356263
+37646438396232333661626539333738343732396139346334396135396234633161386264303038
+32666636626137313564383635623761363931323261346331636632623731336166646262633666
+32393534383561656438393161326661383939663835633930383635653236636136663665646163
+33393533653363356163373461616135616630653866343139643137363436346138376530363135
+35356536343863643834346666613831653161323039653637626662343433366363393831343038
+33313162643730626539663961636434386533356631643062333434383762653136323266613561
+64626138363466373662386162323865653738393065373063346334393431613132343663303336
+64633461636432303433396562656164313933356261363364656331623038393430376437393236
+63653031336465646536643464326136386666373037633137666539393634383432623631643962
+63323063363537643437643835626562623466373830623136333761636538376235643633333939
+31653963373234343762643234656332623561323334386139383461353461656236346361366565
+39383864396264386639626631613036666632623764646637313563376536313665373330363662
+39356261616632316163636533376637336537643332663336643831623334373731623032613961
+34656236346237353237653737386131343166303030313263366231376366653338663030343235
+38643533613732313562303133616165316431363562643530316635633464663236363339323533
+38316562396533626633636630333365653731626366356335333136396136613232633138393861
+38326436323433363838396363373334333064393731663733353439373662623839616666303833
+32356139383735373832643632383931646261623830636238353963373933643739346463616534
+66656663343962383131646564646163656466356438653732303062343166633463346131313635
+65613232633161313435626466326538333364313764373963353766633839626164396134323938
+35633164666333396536323566663036626134376432656565336237356130643236313133663137
+39633036346433653636656134313036666633393766353662313830663936366534626661356533
+39343832653535653461363839616433376431393833613731353539346464333663373739333663
+34303531303435363966333965373632386362383439303062316539646539396438306630316332
+33613963656364626130633836366331336536323965613266616564376362643033353830646266
+39323963393530663133633238643530356566636564336631306364316431373164306262373132
+63346135386235353962333331396263663637376364343330303163663432643765653966326338
+39613561356663653338653430616564366138383366356435366430316432346533653766383232
+39663638313637323966616664303230303933633937313062613230303930616135323464343536
+32386564363938373630306539323639363833393834313963336630623839383935323733343566
+32656266306134393461303338323361613139373931623039383231633964663863623537656132
+66663062633636616638386337383664636634636161616535356539646236373461323039316238
+37303535656331336662663566653133336465636466613631373364393935363561343937303030
+37343631396539373937336135653066376535356162623261353237626265643035333737326461
+63343130376465353331616164643836353266396265663839353331633830366438373866396334
+62626330656338393035636163616361383432353536623231373031376230663834393036653237
+35383134376361646464373632353664326134366232313539623733373630653334613338336233
+303733343761396532386366313439393063
--- a/group_vars/stage_prodwork01/plain.yml
+++ b/group_vars/stage_prodwork01/plain.yml
@ -0,0 +1,218 @@
+---
+
+stage: "prodwork01"
+
+hcloud_firewall_app_specific_stuff: False
+
+# TODO read configuration with hetzner rest api
+shared_service_network: "10.3.0.0/16"
+shared_service_elastic_01: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-elastic-stack-elastic-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_elastic_02: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-elastic-stack-elastic-02' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_elastic_03: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-elastic-stack-elastic-03' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_logstash_01: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-elastic-stack-logstash-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_harbor_ip: 188.34.196.240 #server in prodnso!!!
+shared_service_gitea_ip: 157.90.169.198 #server in prodnso!!!
+shared_service_pdns_ip: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-pdns-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_mail_ip: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-mail-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_pg_master_ip: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-postgres-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_pg_slave_ip: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-postgres-02' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_maria_ip: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-maria-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_cpl_01: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-cpl-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_cpl_02: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-cpl-02' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_cpl_03: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-cpl-03' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_node_01: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-node-01' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_node_02: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-node-02' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+shared_service_kube_node_03: "{{ stage_server_infos
+  | selectattr('name', 'match', stage + '-kube-node-03' )
+  | map(attribute='private_ip')
+  | list
+  | first
+  | default('-') }}"
+
+shared_service_kube_ip: "{{ stage_private_ingress_loadbalancer_ip | default('-') }}"
+
+shared_service_maria_hostname: "{{ stage }}-maria-01"
+shared_service_postgres_01_hostname: "{{ stage }}-postgres-01"
+shared_service_elastic_stack_01_hostname: "{{ stage }}-elastic-stack-elastic-01"
+shared_service_elastic_stack_02_hostname: "{{ stage }}-elastic-stack-elastic-02"
+shared_service_elastic_stack_03_hostname: "{{ stage }}-elastic-stack-elastic-03"
+shared_service_elastic_stack_logstash_01_hostname: "{{ stage }}-elastic-stack-logstash-01"
+shared_service_elastic_stack_kibana_01_hostname: "{{ stage }}-elastic-stack-kibana-01"
+
+kube_cpl_01_hostname: "{{ stage }}-kube-cpl-01.{{ domain }}"
+kube_cpl_02_hostname: "{{ stage }}-kube-cpl-02.{{ domain }}"
+kube_cpl_03_hostname: "{{ stage }}-kube-cpl-03.{{ domain }}"
+kube_node_01_hostname: "{{ stage }}-kube-node-01.{{ domain }}"
+kube_node_02_hostname: "{{ stage }}-kube-node-02.{{ domain }}"
+kube_node_03_hostname: "{{ stage }}-kube-node-03.{{ domain }}"
+
+shared_service_gitea_hostname: "prodnso-gitea-01.{{ domain }}"
+shared_service_harbor_hostname: "prodnso-harbor-01.{{ domain }}"
+shared_service_kube_prometheus_hostname: "{{ stage }}-kube-prometheus.{{ domain }}"
+shared_service_kube_jaeger_collector_hostname: "{{ stage }}-kube-jaeger-collector.{{ domain }}"
+
+shared_service_hosts: [
+  {
+    ip: "127.0.1.1",
+    name: "{{ inventory_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_elastic_01 }}",
+    name: "{{ shared_service_elastic_stack_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_elastic_02 }}",
+    name: "{{ shared_service_elastic_stack_02_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_elastic_03 }}",
+    name: "{{ shared_service_elastic_stack_03_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_logstash_01 }}",
+    name: "{{ shared_service_elastic_stack_logstash_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_maria_ip }}",
+    name: "{{ shared_service_maria_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_pg_master_ip }}",
+    name: "{{ shared_service_postgres_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_harbor_ip }}",
+    name: "{{ shared_service_harbor_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_cpl_01 }}",
+    name: "{{ kube_cpl_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_cpl_02 }}",
+    name: "{{ kube_cpl_02_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_gitea_ip }}",
+    name: "{{ shared_service_gitea_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_cpl_03 }}",
+    name: "{{ kube_cpl_03_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_node_01 }}",
+    name: "{{ kube_node_01_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_node_02 }}",
+    name: "{{ kube_node_02_hostname }}"
+  },
+  {
+    ip: "{{ shared_service_kube_node_03 }}",
+    name: "{{ kube_node_03_hostname }}"
+  },
+]
+
+# TODO read configuration with hetzner rest api
+elastic_stack_network: {
+  prodwork01-elastic-stack-elastic-01: "{{ shared_service_elastic_01 }}",
+  prodwork01-elastic-stack-elastic-02: "{{ shared_service_elastic_02 }}",
+  prodwork01-elastic-stack-elastic-03: "{{ shared_service_elastic_03 }}",
+}
+
+# Note: all dollar signs in the hash need to be doubled for escaping.
+# To create user:password pair, it's possible to use this command:
+# echo $(htpasswd -nb user password) | sed -e s/\\$/\\$\\$/g
+# TODO should be part of the automation (htpasswd -nb traefik-admin traefik-admin)
+traefik_admin_username: "traefik-admin"
+traefik_admin_password: "{{ traefik_admin_password_vault }}"
+
+grafana_admin_username: "grafana-admin"
+grafana_admin_password: "{{ grafana_admin_password_vault }}"
+grafana_user_smardigo_login: "smardigo"
+grafana_user_smardigo_password: "{{ grafana_user_smardigo_password_vault }}"
+harbor_username: "{{ docker_registry_username_vault }}"
+harbor_token: "{{ docker_registry_token_vault }}"
+elastic_admin_username: "{{ elastic_admin_username_vault }}"
+elastic_admin_password: "{{ elastic_admin_password_vault }}"
+
+postgres_replicator_user_password: "{{ postgres_replicator_user_password_vault }}"
+
+mysql_root_username: "{{ mysql_root_username_vault }}"
+mysql_root_password: "{{ mysql_root_password_vault }}"
+
+netgo_msteams_hook_cd: "{{ netgo_msteams_hook_cd_vault }}"
+netgo_msteams_hook_alerting: "{{ netgo_msteams_hook_alerting_vault }}"
+
+kubernetes_with_awx: False
--- a/group_vars/stage_prodwork01/vault.yml
+++ b/group_vars/stage_prodwork01/vault.yml
@ -0,0 +1,467 @@
+$ANSIBLE_VAULT;1.1;AES256
+31376136303461393238366661306362376566633162656530663632323931383566356430323862
+6238646639646538623030323539343539373536643932320a386165346361316362386234613435
+37663364393734356361383138393335616134633832376661303961326135363238343437303562
+3138613734323033340a356665333063666231643238316239353436353062633061306634346463
+37373334643530623030303062633862353431666433346266656664306561663565303337663834
+62646331626163643136343066383465393265383634313632306264386334666235336133393731
+35373836633462353964383265363634326264646435383461363362643162356466613331306362
+35333764323363383961373664363566346632653534373763333561633336393830323961666632
+65386536353632373766626434323338356632393635663736623333353033376161373234373664
+30353133366233636439343166323332366561633262383835363663366132633130346331376663
+65343166316464636363343331383734393062653230626435356430356238663634393333383864
+39623831363962363161613834373434386565636137323361643730356164393365376662303764
+38653163303734363333623165383037346466646231633464363131323963363734326162393736
+66343639383161663734613439613736306334623962663765313166383262346661626630313364
+65343865363938613730616336323965653762656636323363316139323466613832373165616136
+64643838633239623762636531666537636435336331376137323562306666313637663461343232
+63656632376237396233363532643334666563326136653435353136653963633761396638633266
+38643262313138663263323164373064636364646431643462303036643033653566663835383435
+34653137323365376466373833663238353537666463623762373837316164633030366138376165
+30336532343961376430326662613434663932633361366434383136623731326366326439323138
+37663630346631663565363831663735366432326335376566383232303562363537376339376262
+62336331653439356537323138323162623230616666343663643961356262663839626266363130
+39356164663733366662393935393164373661333263663933373439353263303036643033313361
+63333862393136633861316662353030353662633638643330343234383565373232633161353561
+64363164633261386239626539363933353332396636613235353533393833626565633739313230
+37363534653363353633653765353263343832633764643937643366326261323063633965353536
+30373137303534633832646166623639656664633032356135336163373134323337343261633965
+39653264653036386463313539363634623531653064306635373432653464306532613165613463
+33623261386439353437636666326430656437346639663236643338393735346261633230376538
+36313637613539326662366236653661623565376137373065353232636563666230363562333365
+38666137613266653461353739376136316430643931333462323432393263666630656236383937
+38363131663062343830363835323033663036356266646534613038303166383534393465653430
+31323161633438663833313737373664643236646635393964393262316331386461333263646330
+38333366373537326264663333633334303935353535663038343938613831653333346365323836
+31356163393432396466323065303337633537633132636438353932303563393063396230393263
+31306335643565343432643961383833333761383731633064613564656364363436633537323938
+61383430393930383438373433383335343266363062616564383865396665626434376337656563
+30353636653330643963613965343237623536346332363533353530353064343065393361393164
+30343435393035353832313638656339613266356464373566613030616539376665636333386261
+32353733376362316134636564373635316462303236346339303637636365346563303437663039
+30383966396262366638393861326166363761643830613861653238373561613866373564353336
+33343564333361643137343262626365366462373666623863303662346165653239323732646130
+37633963343833613135313663643438356132623165373539323166663330303264616466353539
+61386433656663383532386332643131346466623131333739313832646532663961376537393439
+62616536313965623839353331663939393439666235333038653734633535623862623630633935
+30313561633234306234636430303961353930626237353632633233306539383365396266386234
+62653966646235353865393539633130343735303233646137353831633433356165396162633131
+38653231626162623036613861666135643065313333636239376432326430636236616431613566
+61626661663236373636356661623136333939626564636366663532313062613265383432646364
+66313637333338386336363739353235626139386263343265653865663362306330666261656435
+64303966373333313736656565343862666166373465356438666564653666653062636436303164
+34366162333137323437396663643538383730313234303661353239326638396435383864626466
+33373232323662356562316435636339393466633031326463333032363930353065646464613735
+31306132396137363562663736366131653430643431653634363362663266623532626230396562
+38386162383331393462383766633635373038353561303462643133393336313135623232386233
+62613462366462373537333862653963303765303565313663343833653236343933376635663765
+34393238636238356234303237623732616362303032323831366338316462333637366165313435
+65343861343361663864653739386531323639643832316264373139396234636535343866653966
+30643061393437653461613134623833666432303563613738613865383933386138383536353332
+39353431383933356536613639613339666538306632643561373833363437626466613262626361
+64653365666661353632656635336464333433373832653535396633316364363937353134353035
+66303037643532323330303433633730626437316630353637636236663235376636303839346361
+32306538623763393533376566633630663530643965386566653764303638373761666533396563
+62396230396266626131626463313762356333646530396133366538643965633863313766333332
+37363637343335626462333666643362653735336432343635393364613865363663386366623164
+30376430313761623236366336363661656634323430666665653739336138363932393836653762
+38346431656464653161363239323834393338376264373934663261386565353031323966363361
+30363735363132373963643661323030346365333532396665393661323066343563393933643033
+32656230373266366137663239333162323732663163636337353438366438366266613163376335
+35623732303235343365643533393135643132656330366135353063613165666563303839326636
+66353339323133313662393331396536666233643861316634613830346435303237656130373136
+36366137386261306335616338333737663139323061626466326136643239346466393961353331
+61616538656538353539363737333138343361636634303436376536323435353838303830663161
+37346635383061303039656230336336616439633936613135333438353235326666646236393863
+33306637343764643334663962626164393734356265303165623032356133366637373130646136
+63663532613537396265643837616364616530306631333232313466623465653534353831373033
+38633839313863393032646238373162643866303065343236323265336533663732316433666432
+38646535383831306165303435303764343238613230306139373432333534333562383963376238
+62393664393761623839396161313265343630343435636662626563353932393363363733316538
+63666563656462623563393435626165346237356663343132383938626433653063636133396461
+66386331643032626562343366653961656631613433396430323630333239636530303238646464
+64666464323336663732333861666331613037376232333264336230333965376334333665333537
+32653730376561663038396664623237383536636461633032656634383561343438393233643237
+30333536373864663537383932323136363830366638346435653331663836613232363561343630
+61363435383838633861343838333865616330393661313465373737303737313438623334666332
+30363737623362313435383231383333393733333563346166373130633231666130363535393835
+62613337343765396134636462623039396665653936393238333430323136666536313233396462
+65333565616533376161343633343364393538643963343237326232663362383961613466623432
+63363561393132663763373532333761663764313064663838663266396231393365633334356133
+37636230633561333863363765383965616537356437613439643136666363656237333333633962
+35356366656366623164643536363563646535623465636163613264396436613863366663313530
+33336130623032323932613238366166633833623265376234616636356339363938323238616665
+37313361343865333138653035306664383461373834643263643363626630326532303162393230
+34336330306637636637633536333633376361373161383038633661646130303439373565636465
+30333230316166383439653235653464353165616265643961373431623933623432306636313463
+61643937306266626132396164353361336437623434653339663630306135373532343839613661
+38616330363066346135343433643462613931343361633262636539303737353334303536376463
+33373065643231653236333939333564313039316238613831393163636639653237336163353663
+62316634323933343330633436643033616365363230306262653637346538663038643863323562
+30333662326138363934306264313534343732653734313763356438326632383737393662356264
+33343034343335663030313032363533393136336135633863303561656634316437366236616466
+63353062363537356633663033633136383664623161363466653730373631363261313630646336
+66313762306466656230646338383737376461663135366532313533376130613732336535363436
+31636537376661386233316161323031343830623734633163396234643635666434383261623635
+38633264383939303630313235373261626535323261323464633134643135663033643366336639
+30653239366537313564623131313636336535373663643836323461363634306637663539323365
+65393337393435666337646231333437316637643934663337666666393930386333616231646664
+65356338386163626166613632626666343635313062393233633033653966376566336139633937
+30663438633032356463616435663562343865333035396436633034623037653563626536326465
+66303466313536373562303833386334646233313161666637353163383830643636363432633562
+65333337343066393733393631653732613139393031343866306239333661376234623333646233
+31626537356166373938643438653262643236393238303562393538376331613162346235396633
+66623731643261613363363962383563353232373933643339323262626236333439343439633636
+30346562323331633061623035323236383136616635343865656564356463326563653264653734
+33356163613361383835323537326630336630666232353232383334646334333762636231616266
+32633565376466323162393931383236363061306361326663373738373166303239333030326530
+61323331373765363839623261633261656261633563343864613635616537633630663737623762
+64373032613962653763316234396431383131333963306666613336656162343566306163353565
+32643038333033616139303737623337626366323964656261643831313334356332656339396536
+33656563613463383236343037303963343264656234393237336261356638326262616237333866
+30656365333865353032646239393930656564373335623734643961356435333761383566653737
+36616164313635363134666161313832343961366162373933373738316230636539616435353435
+38313962383066376432633235623665376430616364653766646537636336303435313231613631
+38343262333233353363646361306435313030653133653861343765313261313730396564633337
+61663037633737646433386333643362303337303538366137623139313462383736373363316632
+32326364653936643639396636323565313864396163353334616238643964626633386234633662
+32356533373362646632623431393436373630376335373465613232396536376438323039346666
+66346362393234383332633736653466363434343833313764663066633136373238316230613561
+39346461323433623238656263623834306235383761363435663663666266383766333061616262
+66393730616632636531333165383235633132306266363766363534653339393834616639653832
+36613530636430643062303637613339646535373562356437336530393665316130626362366538
+39363730383330613638636437613334323530353037316132336461333039366638626139323363
+38613630663834323163373163633664363633653530663037336565366433396333616363636130
+38646131323061616164626532636266373366366564326639323536643638333764653266383737
+32363636663561343033383865373636643032643938333465393364663962303366343835616330
+36343132303262393233343231356331633762623261386166373632346237396633353430346335
+31663737666164653539386435386335636439373338313262666534333737326535636466646462
+35383838353466303635373730303232623834616462303462396634313734643861376262366463
+37313438663235363439663737373866393764613663643130366531393337383734336638373637
+33666436646161366331656239326535353466316632343331383863623430613063386132636132
+30663036613133346632323233356563626236663435323165616630383330303933633232336231
+62626233363032333465356436303063626535333233336166633334346665393037666533373334
+65333138393961356665363232626632303734626364653633613334663937316639383566346131
+64663937383939623266306338373963363466363337623632336636633134623631636438613935
+35376536313230323263656534376162623063353037633264356162373961623836633634373366
+63313736393466353066333939663936313730636137386562653831373433663236333530663362
+37333634633134666464316336643661643664363631626631623537393033623964613861326330
+36346238313538376565323037383263356630626266643964663161636465343733373837653635
+32616263323361383337313434353530363038303635633763343738623838336637333163366130
+62316362326237383133303862323934396332643864313166383661303862656466383362363133
+63663966653861643266663866383963333663346332356439323030306230633164623863333135
+30356335393033663139633531633937386364353166313963333436656238663431323964323735
+36306533633832393538303363623239316263343031323336313735333133373766313665623261
+61633164326238316536323933396466383165306234646662656661353962653032386339366236
+30616336646262323139396165386336373262633639353130613932656434653632336135373664
+34343036373233353538616562656166333236353133353761313838656461303764396630653765
+35663238623038323931653734663062623434366465306233633435633266383030373434303962
+62326230326539383533343036633366386239623464653338393338666163636630376662313636
+63393763626237313539303563323139343332343933313530376666633238323635366136323265
+39356564643863313765666465343466356165353065393964663238656464613738663931336366
+66353164353836353836363736356663363761366466383538396331346166356466333634353933
+65326539653264376432356261343965313665646166363139373132333334353530653034383530
+32323434316436636461646632623635323735656332346439613533643031326261383535656165
+62386632633438376639623362623532333036333136633332393061633831393564616164386333
+36323036666666303931666137356131353339626234316361373432346661303232396265623336
+36363137613562663865393135643639396361373361393566356336336432666466643831653239
+61363662363733383664666535303430323336313930663361666533353936353337636664356638
+38316438343364626462623237326164333636336333313930626266316132353762653537346537
+38363064316530643839343062333636643830646239616435396433613836613835653537336139
+36363033386662653039393539623436666162613562616531656430386561393731346162396461
+64646534633132656533363734643063653033326563333131373338313833356634656334363266
+62376330336365626137363232336331366161373231373133643335373263616630333465383234
+63663065336165386635363631343666316365643963306531366261626161656331373236636637
+62303032663137363363306564333864316535326564636464396430326439633436356336323665
+62666535626265323833396137633735633631333631633638343433323031343439633734303364
+33646664353733313738366662363132343133643939383733323134363062343237616330323866
+37343932346137663339346334313930663734363539303933356534643437643161303134383163
+31313465396439306130363534303733643834343234643837303462303866616638643937353830
+39346136663166343333316565653039363833386361636465663333636534663066653966303635
+37613931623332393031396538373634656139363666353061336634346134303834376264623530
+31376432346437323566303761333266626264336232636131656133383763366439323064313263
+36363330656537356262353933323733393565336461316230613732336438666432346530323465
+65613036383830616335306163633536306562613637633934353062356165303935653636653762
+36383164643635666563386466663039383339616533643139303664396531373735363661623766
+65323738303430653637303566323335343836333466353930623830346365336565313035383131
+39386633663832316635373066613466633930613034303530313035366237346631393864393132
+62313662633030363235343437353537336432336361376166386435363635396130666639353166
+35386535313066656234316331323731616630636635616561653236646466336165363434346131
+31333632643364663331383336343136366363633537663365386534653463366561313234363636
+30656332663064353937373333626436613934653834643265343431393563363932396538303930
+64653839666137616631656363313464636531383065623566626665656234373534653330613962
+30326138623630396264316634646636343262613638666634333134636638643631313237323964
+63363134363435333662386139653564613761366533323036633462636236376237346663613039
+34303339326136633366306338373362356136613732663666326133343562323638303661666436
+34396561313930363934363936393839383432383538636464303232333266303863633137663235
+63303939333931373934313764363263343431386234323734313563313539616238386434343336
+63303433386337666331643862343563666235636132623033636335613663373363333032636135
+64333664373961346361336163373864316437656163383336326366326565333434386465306565
+39346334656266313735346539613365353565313234333164643732343735613935636137363862
+36303635343966613163373336313238373133396461313962333465623566643237613264633235
+30623161303435323439376638363930376637316631633064366430353231643934623732663236
+63613262333866393137626430386232336230663262356333643861393765623865353136383036
+36626562366134356331643032363633613834316563363163666131666261616165336464396135
+63343066363563623861636462376134623832373230386331376135313463643232306634313038
+63623337333465313264653137643366393934646661393931343966306235323966626235633063
+35616634343433323730386235343863343333646333386664623365633331373832353661396230
+37643333373966353238363631626366316664343030663766663265383262363161613337383537
+34663261313564643763363734343736656466373862366163376138613031656530373134626337
+38633364323330343236303634313139623231396137326534613039393064643565373764626563
+65653830316261663837326363333034343438653965666561386631663066313134326235343239
+38663739356337393664656566346163386533663761666636393235366539363039613333653664
+63306638386561393362373762623637326465303234616238313931353261356366393166376562
+34636466353137353630306433636330316631653237663630666337313266373730636533393036
+32376363333761303238363136323933653432383138303363343732393661616633306463336566
+65316566633630363963353939343261303338363534393537633133333236303837343062346435
+63613566386663383034373766366361336131333364393761623336363132386537383432656335
+66653466343262343266333862303232633661373561613235316136336536353534346461643134
+30623561666438316136313030363433633066393438356461363161346564323738613336643932
+65333162313966643232343163323231313530383533663465633031656464323866306239396661
+36643739386131636633376538623831343538396636626262376564393363326363643133613065
+36636562643139393135303135343737393466333533386333666332363437333933333131636463
+31346638303036326433633539613934633933313232363735313565353462646237626462363636
+31326261336232396539336161663239393034663665396331363636383534353933653033656337
+62643963636439383166333362323965653938346465396430356130333734653537313363303462
+37323961323232303865373332646631323466356632616161326138656664656632333630326535
+64663733323336663531653964303831353264663863616232396337646337346166353238363965
+39346262643333326666323863643033646430373230303535353564626536666634663135653365
+64636233633761373037323431316436383862633062333332343137386330333932633538303732
+33653737643366393561363531626235373761333836663063613063343730323037363839643333
+39613631346364353139323661366538346136333034633165653330616434613736666131626137
+33336332393432616135656134323936373362616331393937376338393037643539663934653361
+61626362623139363532623062343831373932633766303366303738656235653666333431333234
+38343934363037663363326631333230313466306636653432313736363435383963343662323332
+36316637396661653665663535623333326634393966306336393336343536366438386662333431
+64653732616664663566386361373636353865333238313032353533373661623164633530326131
+31366565336435643938393461643431636634303932633831383261306636626234333366366563
+64386636326535393462306639636537306161613530386238316638386263653630396262626165
+61653338616530356534613537636566643265646431303734326334326232363462646631353739
+34343939393662393635346361366166666139333765653866356238633964653739396365613234
+38383666336430383334313265373233646166616230636363626264363961643362383063653132
+66643765623366623438343061346435323936373635633130306535333661396232396434326562
+32383562633533316132346565373832353365306463626362613066653433316133386562373039
+63373432663364653561326332316563323363373937303664343166383263616230623030393362
+32373532656636333061653963383262663339663562393962303336333433373136393564316665
+32306262306330393933626335616263343964633938303238386437366332306166353533363966
+39376663363734373238343363393239666535353963346633656338303336353935363930323333
+65653261363536613436306135313236623537333539616530343639366638356561663364363366
+33626666333164633030353563353836646665633561323038316334343736376137393933623731
+32313237653839616263306232373861643266303364373962636534303065613438313062336466
+34613762363232613962313364616632353233623836363638353464643136356638643330373538
+32366230393131376234383438303938363363333434643534616566353635306265346239323763
+34616339616538336264643765626631313035383839396232663631636634653137396533313933
+30646134303332663135623538663637396133316531306538333465646165396537653133386132
+62613830363163643532373261613134366536636365376238323631346166393437656131366435
+34306263303938643963393961616134376163326639356165343332663835376239643463303032
+39353635333732613964653033643036306166303139383937326361363131333532363532633834
+64336238663932643832383462636130623766363835643834623531323738613863313838316561
+32613664616334373133633037643236663637333565353961393535613636336436643766636533
+38393531653338353563386462306534626238346262643161363934636339396135323937353135
+35613131383564666263363763393339346239636538333464623361666236653235313836373237
+38323038653233646539383562396332363161333263383632336638663766636439643834303132
+63623335313239616138383633323036646131626433646664613762653764373063393531353239
+66313534396333623837323934353830396232663235393866346664393864393535323233623262
+32336661353635326633346236653265366637633335383066316261363032316231643133646563
+36656365353938646234626562303461333166323231333964393262396363323138363464316136
+36643331343432643266313939623838356332313262333530386665323934613131313330656461
+37643961343334386137316563306565376438373165343863346638333531363438623235633861
+38373363353031313937346364326534393031646533333362363633396539643030353862643364
+33626634373435383061396666343337346633393366343331323664393335393431326164326137
+34336361623062653636336566656438353639343334326263393666326133663863323032633061
+61393466383039396364343237383331313138383465343630343766396563316137623662653439
+31376530353532656262316232376564666362353631626339653162616530303561373932366563
+35393465643161323134613237363264353235663066376461343036313131303837313562333332
+34626132363439333963653531336265666435333636366133316261623536343834336136386361
+66353031316437333765633532396233626437633937316430393765646566316164626132613837
+36363037633239643030383163396631343932613834353338643765393364306332656630653364
+33626637653830343866653335626464663135393266646365383562643762643966633631383665
+64383836323765646165363032333466306363636631613266303738663465393837633734373535
+34366439383762386661333730333666343239356135353234376636316465323337306436643335
+38343932303336626439303337646566646534313832353835303164363061366138653633343064
+37326461616630373533376562643038333433643061363432373739343434663461646363633237
+38343431653730613661616365663762316134636237623233643166353763633263393330346461
+36303039313065643438656237396234616435333431316661343539326638633134336666396461
+32306331346236383165383961376166656461653734656231323130626639313164376666306235
+36653263353232666261613735653161366634373766303466333463353462353835646162316365
+63333939636630343332376331303831386562646333323738623037626562373664643631653364
+32656438313231386362643538393134623361636163343763653038626564343431666639373334
+62353436383938633733366635663238356164316563396366323863646565366436303165306534
+66366139306334373238303036353839326436653332313962623439386433383231656263333265
+38613162383830346330323561306535346330653835393536353961303535396361356532303438
+32373331636238326263326366656338666562643839323834353666333363333561643838663266
+33636135653238303535636637333833323461373435373361656132343430623566383534393931
+34393534366331313939633162333662666264306634643066333061653439383961656566653039
+66356138643734346237643139383830653933366334313137656439353765326238343138396435
+61306234353563376335343661363363323239613531643532383530373666346630616131386338
+37663531323536353833383431376336623631323963653065633636613263663238326235636438
+62656563363634616535363761626165383234373431333662393635653831313539613137633666
+32653763356632666462633538353938633261663235313862393239383462646665616165636439
+61326263646136613739626336316531383137313566323730356439653735623336636437393462
+63353930396239663731333463356337353136306630633764316162633764303265643039663963
+35353664613532326466636365643861616437333432326461336365646366633537626132613235
+66366531306364373534393233363632323563316166663933633233353165386430333938386465
+65623038373139353633353034313132306266373962373633646133656462353337383235373433
+36643665366533373635613833383962396136613836623135653331346666353064636438373932
+37313166356436336333323038343734663538313265333030636363356633646433363561663862
+61663635643761613166396331653761386165663038323438313861383637303363366364326630
+39386461393832633338373264346335633266303765336639643833613265636133363739366161
+37366235623637336165636565326232303633653733353635383833363564613238323835313030
+35643566623635616532363130653262653135366566366638653263643464346337356363303738
+36636638643036333135383262373839356331373062623830663835653833343439303937346138
+38616536326564643933363965626335393430633062333830656561633566636432653663663036
+66313837393364316631306334653439633232626330623834313935643366633662316263343033
+36316562323963633463386366616537613734643631323163346536643636333163333430646662
+36633563363338663238613163396338383362633831333439633933363964346138626134353766
+35616434633639333061333364336465336533396636376634303736306535313563616565653135
+62353038616135636139393335333662643765653465393239323231666563653165383039313834
+34313966363162386539316238343632313234313931346335656136623434326132316536373732
+36363261666430336662643665346532323361356134336364663431653666363765346130323430
+61386631343962363935363538346536363837363764663664396163376466303663343137383832
+62353933323261313261376532303837306232336263386162613565313966336564303436313639
+61396133333661626138323232636439616234336434633134316662343334663166353032636463
+63616238356138306164346666346235396533653635653031653964313839353435353963396332
+65323735386461313134363137333732356138643335313737623330366265383861313564373066
+35393966363132346431323963386631623532663338343334383930373433343631323732323031
+33373936336462363933306261646263313165383936643335626362333263383035336636323666
+35323531636635303936376664643730623333633634373931653137616130343462316132326361
+64626664383562386165346235323038613734666235386463653133613836633335613866653532
+33373930356662616434323030636231333966643866653265663265303430643639313330616539
+31323239343938376239303630653636613565336361336332623966623431303231313666656161
+30333233616639336636313436663361306135313132636631663865636663636431663536633732
+61303764663531373261333938343966633162313137386231643937653634616635303562316331
+39643862353965323337313232613030386434383237653061343634333062376166353662336431
+39653730393762613466663466656139346366393137336263646234353337363136346533343638
+63393265363430383431343233366333363433616362653438383663353436356464383632653863
+39623730393331333761386136623866623663333737316331316337353962616533383632366562
+66313566343932363266613466646632316538323766303232343336643036663930346466376633
+32653831623363646539333633346538303131396630396664303134623061363061613538633836
+33613630613335326137306131346135333633353832373238653030353737356164663937336363
+37383864643164353862333437643138383631363238316664643535386238333932353634643933
+64643134366264353734316532396235623139656231356463343765383762373666643464343965
+61363562373930333061363731313066396661643732636462323535383636623337353331393139
+39373561636134373733613733633566643261383934346535376261313662373932393436316266
+33333562313862336537353633663837383762663238613664663034643134653632333065353063
+66633832623335633634326130346634656631626339313936336234393464306462333764326232
+62616363613533323862313363346134323639633066636565623031613939633065316133656437
+36376563653763636566613533346331303366613863666138616335313838656331353134313133
+38393966643637303835353162646131363865396535356461366466616137333162396566303666
+33386431663333356137623337366430356463353866376638376262393738636537353738623130
+31633438313238653035393861653062656539326534343139663461303964623937646435303861
+31656634383934373261306664333465313833616362396635616365343662383261653131373962
+31316662393161323765313336623234653165653133393830363561653539656665653630336538
+66373037376365366134653232386431393334316333376465633462623763383130383931323133
+61613262653434656562346265353663623937386336343337303166386334626561303863376539
+36373636356338326537393935333730366364336239633035633561363563666134633161666430
+66633263643164396566643561626633326532393434643164366465626561636437343861653962
+62656134383038363032346435333762663564666264383866623865303832376136623266663363
+64393931303066663733303161653137386432346562356164306162313266336334613233633965
+30336135303935626434333036343765666433313938643337353138633736373564343261613966
+33336537396633613933663232666663663135393063323136666536383161323061333263396131
+66376362353039613431343366316639323438313866636334633261343630316263313431316664
+31363939393835346437366635383537393438623536396637343930633461326530383462356139
+63306334306637633065613365326139353932636336376534393962323764633931393633376163
+38616131343661323038646538653037386437626539383233663138323262643162633634303930
+66313031663234356539386666336263356366653438653134323334333932623263313632313136
+32613238336137316331363135393339303332636262643561653030333133336265656134323064
+62663761666162616534303333643235363762666539623666323135303639383461633564366432
+34326435653730613462363635313664656139306663633836393264626233623035336164333463
+64363738313761326432353336396633333430303236653930643035336533613532626331373565
+35393361363536316431313661366633396365383134356232383030333538383930373533336137
+35303033386464643061396238363235373634633430346461363331343263323130343637343963
+30393539633261326139383332613036353938613930383162346466393930366331326133373438
+34363436313331366138356239326336663537393139333530613564653936396335393236356439
+61633561353962353665326361643638333134653631383762656561363664303839353266306264
+63306135313030363664373534636464313264623366616465373738323663306666653532613765
+30656533656462346234646462626534306135633036653666633737613532663466383334633063
+32333565636632393930663966613962626237626135303963613434323232386136303635333766
+37313038306439616265363435356362313261663237353934373763376439326364666137623630
+32316563303065613564353636646333313931373263373334383264336239336632653763313833
+63623633323061346131653664343239333061363235313839353762346533393462376139353135
+35333034333364393763336530353532666331346263396334313934353539313333613864646138
+66356439386533613036643830656236636630303336616532633438353734376561326335643366
+66613061396630343264313361333365343638343865666530323761343666363536386364313333
+34663436386363613338656363346665396432666261313066376262346662306135383934633262
+37613232306130323764303331343161616162643466383038303630366637616266376539346361
+32316234386232653365313862353037316331663139643463623561656638336164373964653032
+32316537353831346663613832646662643338653737336439333566656233373166333934643266
+32313939363165356531353861343366626364346436366632666537393538373737316561623331
+37623761363661366339393232643137306438346631386237326437323234316234393634373233
+31366563313036393963316264343061353330623437633131353562623063656230306133336663
+33353161366137373061623232633933373064626335663639663932303730666338393933636636
+38303265323139333263393338316637663138616333363165313166386630346133306138393761
+37353566643338663963663638653831666335343865383965326531343533356534313039306331
+65633166366361373961633131663830643936386539623830316230333661633965336233333537
+65623038336464373334626430623438353034663935623866323539313965373166393739663830
+63646137656135333064343161393734343532393237656164343535656564633335633038383739
+64356432666264353865383633363037376161326464656433383631323761613134356665633138
+37636664623635303661313930363564376132626663316162613339323935633239303530633331
+35343261383430666635626637386135656464653366333631633763666164353665373235373832
+32636336666261616532303530626239313239366333643035326132333966333133306135393439
+61663661366632363431626531363534366236393361343839613962623637316164623639653765
+35353266646339326230366161666431376365383530343039616262633166616631623537396137
+31333665366636333961363962383639333762313066373633306532343066333534376232313263
+30386661633136326332623032623139653562633564616561616636373932386165623461346465
+35646664633131333633643863663066323263393838376434326461373535343337396466646432
+36656630353364643033363962666565393239616461386663643539353336663935633966626263
+64356438626238333937386139386138333739363436313031656165623537653932353037393537
+62303431663735303937656630336630386332616265316532376461376466666663333962323666
+62393365663339353536626662303338653830613537646365613530653066363837623631633731
+30366438333339373534326632373830636363343338643233663934326539343433316134336131
+64323530643737633064663031313765656565613931313166643434353838383134313965666464
+64373665336332353265373261653030373164316233646439336365336136303931643034313738
+35333535613631353935343561313234383763316564656665356162613763376137383533326338
+33336638643062653033633331666263643964313263376363616330363038383530663138653536
+66376335316438353362626436633831666334386230643566393463343164393331336332393738
+66643133626230303831623430663636626132313435636264376465353664626338333466396535
+36643032336431343132313337326165316436363263646465313163356530316136363362306631
+63633564376331343031313730613331393864633634316462626164633839393432383130373430
+30633532666563303039343366346433353738626237666166653930346533306662366365356339
+63306161663262323538633133383664353561343664363731633334356234316132376261643761
+64646332326537383563663039373261313933656539336164643438373763303261326135653463
+64656236623166613132616535306630366261316434303234333139313938316135393766386233
+36313134663764323530333736306465343066383137353835383130303230623037646634616666
+34303438653530386336303237633934383938373333373535356165663566646537656536336466
+66616462333435666536613934363633316664326462623635366531386332366239653963383437
+30633563613262643330323237663664643533623531613665306135363463656163376134376632
+65323263646137623639613861643838346665653139623164386265613165333531373831363631
+65643734396339633264323966356131393166626530646561366138313131666630353739643165
+31333437643461356330653135333036663363313666323736613231393030353834343465366562
+30653565303464316632633237396662323463626463353262343234343730333331333638616663
+63316563613266303762303236386663623166393035333233353666666630366266343466663939
+31393336653133393537336334333163613165376163663931383930336532303030663738666438
+65616330353063656566386634323936343034323938303562366632306338613338636266623732
+65663564343635353635333939646330666565333939336664356464633232393362326631333832
+32313765383963323963306362613036663566363861376232643033366636643566376631353661
+36323865623237303966373732363161323064363662636364366564633235343131623265663035
+38343862613039363936336265383034633138333164613434653766666131623737666536623761
+38613963636162393239323034653561333234643331626163643363316264333365633066333136
+32313635386664343134663632613333643331646131636663643162333231343563316336613332
+36363962343763346161663664663333613636653733623965663662326435393134613364376233
+63306439373536656332313233626637393037323133666138623662353132653166366161373263
+66626131643133373665356361326236656165343339353030656663353230613931366261396363
+61663636323133346362333630666634393530323133346435653735343134373237363034333635
+35303663363837633139633038653932376139396239326134336236653263306662353639326630
+39346637356639303265326234333866356431373439313065366634663963613961353231363138
+39323137653433346638653836393032613263303430653936653330363566623866396634326664
+34353833303566313635346138373365663133363030653861643361363831333633363933663337
+63363165343661363964363263623936393466613465623366313565343464376566356437326463
+33623861616134343835336533383235363139336132663936346537393030653462656461653261
+35306561383433383439393736646531646162313734383630373763383161393463313734346161
+34303961373239623463333933333165336164623964343739623935623832623436383139333137
+34653734663430653062353566663133323634333932353933643262346139376135646162383034
+35613537313861383835373733396637373235366264373766333231616531333733633332396432
+63323462363437313366313632333133656166383238313464636238663638343831383635363764
+32323366396663376635653664623062346535653465646634646432643938383533653039653661
+32303031333332383638353831386362346634613062323530306432353437343634646362623566
+35313934323439393437633834343162616633663733353032396136313766333031643538613439
+63383035626161356232333430643438656433306330303138613833303934393466343666343238
+38343835656265306330366535376430356333636262616535626564363831383034656464393165
+30653635646164653963303930626437633937393838663165303763376632636132373264653935
+34626430313634303534356236316662383539393239346234636537303661633331373734363264
+65386563353737636130343061636364663836663030383838623731396662303663656161376665
+39666336393861383962393064316263666331363234336331633834666230653661306361333663
+32313333356433303939623563396664366536343566343535366161346135356263313932363535
+30306632336239313733313138373839313334663034396438613365653136353534366134393865
+65363533303938636262303166663438643063643062396633663364646437306235366164306332
+3663316534333861663435383939393134643738323661373839
--- a/hcloud_firewall.yml
+++ b/hcloud_firewall.yml
@ -125,3 +125,5 @@
        loop: "{{ hcloud_firewall_objects_management }}"
        loop_control:
          loop_var: firewall_object
+      # end of BLOCK
+      when: hcloud_firewall_app_specific_stuff | default(True)
--- a/host_vars/prodwork01-postgres-01.yml
+++ b/host_vars/prodwork01-postgres-01.yml
@ -0,0 +1,4 @@
+---
+
+hetzner_server_type: cpx21
+server_type: "master"
--- a/host_vars/prodwork01-postgres-02.yml
+++ b/host_vars/prodwork01-postgres-02.yml
@ -0,0 +1,4 @@
+---
+
+hetzner_server_type: cpx21
+server_type: "slave"
--- a/kubernetes.yml
+++ b/kubernetes.yml
@ -28,5 +28,7 @@
    - { role: kubernetes/cert_manager }
    - { role: kubernetes/external_dns }
    - { role: kubernetes/ingress_controller }
-    - { role: kubernetes/argocd }
-    - { role: kubernetes/awx }
+    - role: kubernetes/argocd
+      when: kubernetes_with_argocd | default(True)
+    - role: kubernetes/awx
+      when: kubernetes_with_awx | default(True)
--- a/mobene.yml
+++ b/mobene.yml
@ -0,0 +1,128 @@
+---
+
+# creates kubernetes namespace with secrets for usage with mobene
+# Parameters:
+#   secrets for mobene/namespaces read from group_vars
+
+- name: 'apply mobene setup to {{ host | default("kube_control_plane") }}'
+  hosts: '{{ host | default("kube_control_plane") }}'
+  serial: "{{ serial_number | default(10) }}"
+
+  pre_tasks:
+    - name: "Check if ansible version is at least 2.10.x"
+      assert:
+        that:
+          - ansible_version.major >= 2
+          - ansible_version.minor >= 10
+        msg: "The ansible version has to be at least ({{ ansible_version.full }})"
+      tags:
+        - always
+
+    - name: "Import autodiscover pre-tasks"
+      import_tasks: tasks/autodiscover_pre_tasks.yml
+      tags:
+        - always
+
+  roles:
+    - role: kubernetes/namespace
+      vars:
+        k8s_namespace: cus-mobene-nsodev
+        k8s_secrets:
+          - name: connect-secrets
+            data:
+              JWT_SECRET: "{{ mobene.nsodev.connect.secrets.JWT_SECRET | string | b64encode }}"
+              ADMIN_PASSWORD: "{{ mobene.nsodev.connect.secrets.ADMIN_PASSWORD | string | b64encode }}"
+              ELASTIC_USERNAME: "{{ mobene.nsodev.connect.secrets.ELASTIC_USERNAME | string | b64encode }}"
+              ELASTIC_PASSWORD: "{{ mobene.nsodev.connect.secrets.ELASTIC_PASSWORD | string | b64encode }}"
+              DATASOURCE_USERNAME: "{{ mobene.nsodev.connect.secrets.DATASOURCE_USERNAME | string | b64encode }}"
+              DATASOURCE_PASSWORD: "{{ mobene.nsodev.connect.secrets.DATASOURCE_PASSWORD | string | b64encode }}"
+              MAIL_USER: "{{ mobene.nsodev.connect.secrets.MAIL_USER | string | b64encode }}"
+              MAIL_PASSWORD: "{{ mobene.nsodev.connect.secrets.MAIL_PASSWORD | string | b64encode }}"
+              OIDC_CLIENT_SECRET: "{{ mobene.nsodev.connect.secrets.OIDC_CLIENT_SECRET | string | b64encode }}"
+          - name: iam-secrets
+            data:
+              JWT_SECRET: "{{ mobene.nsodev.iam.secrets.JWT_SECRET | string | b64encode }}"
+              KEYCLOAK_ADMIN_PASSWORD: "{{ mobene.nsodev.iam.secrets.KEYCLOAK_ADMIN_PASSWORD | string | b64encode }}"
+              KEYCLOAK_ADMIN_USERNAME: "{{ mobene.nsodev.iam.secrets.KEYCLOAK_ADMIN_USERNAME | string | b64encode }}"
+          - name: sepa-exporter-secrets
+            data:
+              SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.nsodev.sepaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}"
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.nsodev.sepaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: uba-exporter-secrets
+            data:
+              SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.nsodev.ubaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}"
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.nsodev.ubaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: wordpress-secrets
+            data:
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.nsodev.wordpress.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: elastic-client-cert
+            data:
+              ca.crt: "{{ mobene.nsodev.elastic.secrets.caCrt | string | b64encode }}"
+    - role: kubernetes/namespace
+      vars:
+        k8s_namespace: cus-mobene-cusqa
+        k8s_secrets:
+          - name: connect-secrets
+            data:
+              JWT_SECRET: "{{ mobene.cusqa.connect.secrets.JWT_SECRET | string | b64encode }}"
+              ADMIN_PASSWORD: "{{ mobene.cusqa.connect.secrets.ADMIN_PASSWORD | string | b64encode }}"
+              ELASTIC_USERNAME: "{{ mobene.cusqa.connect.secrets.ELASTIC_USERNAME | string | b64encode }}"
+              ELASTIC_PASSWORD: "{{ mobene.cusqa.connect.secrets.ELASTIC_PASSWORD | string | b64encode }}"
+              DATASOURCE_USERNAME: "{{ mobene.cusqa.connect.secrets.DATASOURCE_USERNAME | string | b64encode }}"
+              DATASOURCE_PASSWORD: "{{ mobene.cusqa.connect.secrets.DATASOURCE_PASSWORD | string | b64encode }}"
+              MAIL_USER: "{{ mobene.cusqa.connect.secrets.MAIL_USER | string | b64encode }}"
+              MAIL_PASSWORD: "{{ mobene.cusqa.connect.secrets.MAIL_USER | string | b64encode }}"
+              OIDC_CLIENT_SECRET: "{{ mobene.cusqa.connect.secrets.OIDC_CLIENT_SECRET | string | b64encode }}"
+          - name: iam-secrets
+            data:
+              JWT_SECRET: "{{ mobene.cusqa.iam.secrets.JWT_SECRET | string | b64encode }}"
+              KEYCLOAK_ADMIN_PASSWORD: "{{ mobene.cusqa.iam.secrets.KEYCLOAK_ADMIN_PASSWORD | string | b64encode }}"
+              KEYCLOAK_ADMIN_USERNAME: "{{ mobene.cusqa.iam.secrets.KEYCLOAK_ADMIN_USERNAME | string | b64encode }}"
+          - name: sepa-exporter-secrets
+            data:
+              SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusqa.sepaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}"
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusqa.sepaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: uba-exporter-secrets
+            data:
+              SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusqa.ubaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}"
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusqa.ubaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: wordpress-secrets
+            data:
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusqa.wordpress.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: elastic-client-cert
+            data:
+              ca.crt: "{{ mobene.cusqa.elastic.secrets.caCrt | string | b64encode }}"
+    - role: kubernetes/namespace
+      vars:
+        k8s_namespace: cus-mobene-cusprod
+        k8s_secrets:
+          - name: connect-secrets
+            data:
+              JWT_SECRET: "{{ mobene.cusprod.connect.secrets.JWT_SECRET | string | b64encode }}"
+              ADMIN_PASSWORD: "{{ mobene.cusprod.connect.secrets.ADMIN_PASSWORD | string | b64encode }}"
+              ELASTIC_USERNAME: "{{ mobene.cusprod.connect.secrets.ELASTIC_USERNAME | string | b64encode }}"
+              ELASTIC_PASSWORD: "{{ mobene.cusprod.connect.secrets.ELASTIC_PASSWORD | string | b64encode }}"
+              DATASOURCE_USERNAME: "{{ mobene.cusprod.connect.secrets.DATASOURCE_USERNAME | string | b64encode }}"
+              DATASOURCE_PASSWORD: "{{ mobene.cusprod.connect.secrets.DATASOURCE_PASSWORD | string | b64encode }}"
+              MAIL_USER: "{{ mobene.cusprod.connect.secrets.MAIL_USER | string | b64encode }}"
+              MAIL_PASSWORD: "{{ mobene.cusprod.connect.secrets.MAIL_USER | string | b64encode }}"
+              OIDC_CLIENT_SECRET: "{{ mobene.cusprod.connect.secrets.OIDC_CLIENT_SECRET | string | b64encode }}"
+          - name: iam-secrets
+            data:
+              JWT_SECRET: "{{ mobene.cusprod.iam.secrets.JWT_SECRET | string | b64encode }}"
+              KEYCLOAK_ADMIN_PASSWORD: "{{ mobene.cusprod.iam.secrets.KEYCLOAK_ADMIN_PASSWORD | string | b64encode }}"
+              KEYCLOAK_ADMIN_USERNAME: "{{ mobene.cusprod.iam.secrets.KEYCLOAK_ADMIN_USERNAME | string | b64encode }}"
+          - name: sepa-exporter-secrets
+            data:
+              SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusprod.sepaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}"
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusprod.sepaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: uba-exporter-secrets
+            data:
+              SMA_DOCUMENT_AUTH_TOKEN: "{{ mobene.cusprod.ubaExporter.secrets.SMA_DOCUMENT_AUTH_TOKEN | string | b64encode }}"
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusprod.ubaExporter.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: wordpress-secrets
+            data:
+              SMA_WORKFLOW_AUTH_TOKEN: "{{ mobene.cusprod.wordpress.secrets.SMA_WORKFLOW_AUTH_TOKEN | string | b64encode }}"
+          - name: elastic-client-cert
+            data:
+              ca.crt: "{{ mobene.cusprod.elastic.secrets.caCrt | string | b64encode }}"
--- a/provisioning.yml
+++ b/provisioning.yml
@ -2,7 +2,7 @@

 - name: 'apply setup to {{ host | default("all") }}'
  hosts: '{{ host | default("all") }}'
-  serial: "{{ serial_number | default(1) }}"
+  serial: "{{ serial_number | default(5) }}"
  gather_facts: no
  become: no

--- a/roles/confirm_postgres/defaults/main.yml
+++ b/roles/confirm_postgres/defaults/main.yml
@ -0,0 +1,8 @@
+---
+confirm_postgres_database: '{{ stage }}_{{ tenant_id }}_{{ cluster_name }}_confirm'
+confirm_postgres_password: 'confirm-postgres-admin'
+
+postgres_acls:
+  - name: "{{ confirm_postgres_database }}"
+    password: "{{ confirm_postgres_password }}"
+    trusted_cidr_entry: "{{ shared_service_network }}"
--- a/roles/confirm_postgres/tasks/main.yml
+++ b/roles/confirm_postgres/tasks/main.yml
@ -0,0 +1,18 @@
+---
+
+### tags:
+
+- name: "Updating <confirm> database on {{ inventory_hostname }}"
+  include_role:
+    name: postgres
+    tasks_from: _update_database_state
+  when:
+  - database_backup_state is not defined
+
+- name: "Creating/Restoring <confirm> database backup on {{ inventory_hostname }}"
+  include_role:
+    name: postgres
+    tasks_from: _create_database_backup.yml
+  when:
+  - database_backup_state is defined
+  - database_backup_state in ['dump', 'restore']
--- a/roles/kibana/tasks/_configure_spaces.yml
+++ b/roles/kibana/tasks/_configure_spaces.yml
@ -14,7 +14,10 @@
    user: "{{ elastic_admin_username }}"
    password: "{{ elastic_admin_password }}"
    force_basic_auth: yes
+  retries: 5
+  delay: 15
  register: all_spaces
+  until: all_spaces.status in [200]
  become: false

 - name: "Lookup space object if exists"
--- a/roles/kubernetes/argocd/defaults/main.yml
+++ b/roles/kubernetes/argocd/defaults/main.yml
@ -2,6 +2,8 @@
 k8s_argocd_helm__name: "argo-cd"
 k8s_argocd_helm__release_namespace: "argo-cd"

+k8s_argocd_with_keycloak: True
+
 argo_realm_name: &argoname 'argocd'
 argo_realm_display_name: *argoname

--- a/roles/kubernetes/argocd/tasks/main.yml
+++ b/roles/kubernetes/argocd/tasks/main.yml
@ -7,6 +7,8 @@
    apply:
      tags:
        - argo-cd
+  when:
+  - k8s_argocd_with_keycloak
  tags:
    - argo-cd

@ -20,6 +22,7 @@
    create_client: False
    current_realm_password_policy: ''
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  args:
    apply:
@ -38,6 +41,7 @@
    current_realm_groups:
      - name: "{{ argo_realm_group }}"
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  args:
    apply:
@ -54,6 +58,7 @@
    current_realm_name: '{{ argo_realm_name }}'
    current_realm_users: '{{ argo_realm_users }}'
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  args:
    apply:
@ -72,6 +77,7 @@
    realm_name: '{{ argo_realm_name }}'
    bearer_token: '{{ access_token }}'
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  args:
    apply:
@ -103,6 +109,7 @@
        protocol: openid-connect
        protocolMapper: oidc-group-membership-mapper
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - argo-cd
@ -124,6 +131,8 @@
    keycloak_clientscope_name: '{{ argo_keycloak_clientscope_name }}'
    keycloak_clientscope_protocol: '{{ argo_keycloak_clientscope_protocol }}'
    keycloak_client_secret: '{{ argo_keycloak_client_secret }}'
+  when:
+  - k8s_argocd_with_keycloak
  tags:
    - argo-cd

@ -139,6 +148,7 @@
    keycloak_client_object: '{{ keycloak_realm_create_client }}'
    bearer_token: '{{ access_token }}'
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  args:
    apply:
@ -159,6 +169,7 @@
    status_code: [200]
  register: argo_realm_clients
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - argo-cd
@ -168,6 +179,7 @@
  set_fact:
    id_of_client: '{{ ( argo_realm_clients.json | selectattr("clientId","equalto",argo_client_id ) | first ).id }}'
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - argo-cd
@ -184,6 +196,7 @@
    status_code: [200]
  register: client_secret
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - argo-cd
@ -193,6 +206,7 @@
    msg: "DEBUGGING: {{ client_secret.json.value }}"
  when:
  - debug
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - argo-cd
@ -235,13 +249,14 @@
          extra:
            oidc.keycloak.clientSecret: '{{ client_secret.json.value }}'
  when:
+  - k8s_argocd_with_keycloak
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - argo-cd

 - name: "Combining helm release values"
  set_fact:
-    combined_helm__release_values: '{{ k8s_argocd_helm__release_values | combine(additional_helm_values, recursive=True) }}'
+    combined_helm__release_values: '{{ k8s_argocd_helm__release_values | combine(additional_helm_values| default({}), recursive=True) }}'
  when:
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
--- a/roles/kubernetes/base/tasks/main.yml
+++ b/roles/kubernetes/base/tasks/main.yml
@ -68,3 +68,12 @@
  - "'kube_control_plane' in group_names"
  tags:
    - base
+
+- name: "Enable PodSecurity"
+  include_tasks: podsecurity.yml
+  args:
+    apply:
+      tags:
+        - base
+  tags:
+    - base
--- a/roles/kubernetes/base/tasks/podsecurity.yml
+++ b/roles/kubernetes/base/tasks/podsecurity.yml
@ -0,0 +1,41 @@
+---
+# disclaimer
+# I was not able to enable pod security flags via kubespray and role out
+# in existing cluster
+# 
+# tried to set following VARS
+#  * kube_kubeadm_apiserver_extra_args 
+#  * kubelet_custom_flags
+# rollout with --tags kubelet,master
+# also whole cluster.yml
+# => but flags weren't set
+
+- name: "Configure kubelet"
+  become: yes
+  block:
+  - name: "Add line in kubelet.env file"
+    ansible.builtin.lineinfile:
+      state: present
+      path: '/etc/kubernetes/kubelet.env'
+      insertafter: '^--runtime-cgroups=/systemd/system.slice'
+      line: '--feature-gates=PodSecurity=true \'
+    register: kubelet_conf
+
+  - name: "Restart kubelet"
+    systemd:
+      name: kubelet
+      state: restarted
+    when: kubelet_conf.changed
+  when: 
+    - inventory_hostname in groups['k8s_cluster']
+
+- name: "Configure apiserver: Add line in apiserver manifest"
+  become: yes
+  throttle: 1
+  ansible.builtin.lineinfile:
+    state: present
+    path: '/etc/kubernetes/manifests/kube-apiserver.yaml'
+    insertafter: '- --secure-port=6443'
+    line: '    - --feature-gates=PodSecurity=true'
+  when: 
+    - inventory_hostname in groups['kube_control_plane']
--- a/roles/kubernetes/ingress_controller/defaults/main.yml
+++ b/roles/kubernetes/ingress_controller/defaults/main.yml
@ -17,12 +17,14 @@ k8s_ingress_helm__release_values:
          topologyKey: app.kubernetes.io/name
    replicaCount: 3
    config:
+      # see https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap
      compute-full-forwarded-for: "true"
      ssl-ciphers: "EECDH+AESGCM:EDH+AESGCM"
      ssl-protocols: "TLSv1.3"
      ssl-redirect: false
      use-forwarded-headers: "true"
      use-proxy-protocol: "true"
+      large-client-header-buffers: "4 16k"
      whitelist-source-range: "{{ ( ip_whitelist + ip_whitelist_admins ) | join(',') }}"
    service:
      externalTrafficPolicy: Local
@ -31,6 +33,7 @@ k8s_ingress_helm__release_values:
        http: &httpnodeport 30473
        https: 30474
      annotations:
+        # see https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations
        load-balancer.hetzner.cloud/type: "lb11"
        load-balancer.hetzner.cloud/location: nbg1
        load-balancer.hetzner.cloud/name: "{{ stage }}-ingress"
--- a/roles/kubernetes/namespace/defaults/main.yml
+++ b/roles/kubernetes/namespace/defaults/main.yml
@ -1,4 +1,4 @@
 ---

-k8s_namespace: "default"
+k8s_namespace: ""
 k8s_docker_registry_key: "harbor-pull-secret-key"
--- a/roles/kubernetes/namespace/tasks/main.yml
+++ b/roles/kubernetes/namespace/tasks/main.yml
@ -11,6 +11,7 @@
    kind: Namespace
    state: present
  when:
+  - k8s_namespace is defined
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - namespace
@ -29,7 +30,26 @@
        name: "{{ k8s_docker_registry_key }}"
        namespace: "{{ k8s_namespace }}"
      type: kubernetes.io/dockerconfigjson
+  when:
+  - k8s_namespace is defined
+  - inventory_hostname == groups['kube_control_plane'][0]
+  tags:
+    - namespace
+
+- name: "Create secrets for <{{ k8s_namespace }}>"
+  become: yes
+  kubernetes.core.k8s:
+    definition:
+      api_version: v1
+      kind: Secret
+      metadata:
+        namespace: "{{ k8s_namespace }}"
+        name: "{{ item.name }}"
+      type: Opaque
+      data: "{{ item.data }}"
+  loop: "{{ k8s_secrets }}"
  when: 
+  - k8s_namespace is defined
  - inventory_hostname == groups['kube_control_plane'][0]
  tags:
    - namespace
--- a/53
+++ b/53
@ -0,0 +1,53 @@
+[backup]
+prodwork01-backup-01
+
+[elastic]
+prodwork01-elastic-stack-elastic-01
+prodwork01-elastic-stack-elastic-02
+prodwork01-elastic-stack-elastic-03
+
+[kibana]
+prodwork01-elastic-stack-kibana-01
+
+[logstash]
+prodwork01-elastic-stack-logstash-01
+[maria]
+prodwork01-maria-01
+
+[postgres]
+prodwork01-postgres-01
+prodwork01-postgres-02
+
+[kube_control_plane]
+prodwork01-kube-cpl-01
+prodwork01-kube-cpl-02
+prodwork01-kube-cpl-03
+
+[etcd]
+prodwork01-kube-cpl-01
+prodwork01-kube-cpl-02
+prodwork01-kube-cpl-03
+
+[kube_node]
+prodwork01-kube-node-01
+prodwork01-kube-node-02
+prodwork01-kube-node-03
+
+[k8s_cluster:children]
+kube_control_plane
+kube_node
+
+[stage_prodwork01:children]
+backup
+elastic
+k8s_cluster
+kibana
+logstash
+maria
+postgres
+
+[all:children]
+stage_prodwork01
+
+[hcloud:children]
+stage_prodwork01
--- a/stage-prodwork01-netgo-hcloud.yml
+++ b/stage-prodwork01-netgo-hcloud.yml
@ -0,0 +1,26 @@
+#  dynamic inventory for hetzner which reads the stage variable from environment
+#
+#  parameters:
+#    HETZNER_CLOUD_TOKEN := hetzner cloud api token
+#    HETZNER_LABEL_SELECTOR := the label selector to use (note: multiple selectors are not supported by rest api)
+#      (e.g. stage=dev)
+#      (e.g. service=prometheus)
+#  usage:
+#    export HETZNER_LABEL_SELECTOR='stage=dev'
+#    ansible-playbook -i stage-netgo-hcloud.yml ...
+
+plugin: netgo-hcloud
+
+stage: "prodwork01"
+label_selector: "stage=prodwork01" # jinja isn't available here
+
+api_token: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          65326639616235646137306562353830363131636463396634653335653331376364613562353839
+          3333343562646437653937393930393933353632616438620a396231343232393830636462366130
+          62373261613734313136613532343634633465333263633139663030643237316630393964373835
+          6139366563313932640a613665376430643436313636663534326466333737396666356231316436
+          34333931663765366536623564356466336235366463323765323862623135616430653930646561
+          38353132663861353631373239356430633938383134663761383930326238396131316136333438
+          36663738363033333634366138303639346465316531646565653339643838393062633566336664
+          64333061663666323330
--- a/tasks/smardigo_management_message.yml
+++ b/tasks/smardigo_management_message.yml
@ -8,12 +8,20 @@
  become: false
  tags:
    - update_deployment
+  when:
+    - scope_id is defined
+    - process_instance_id is defined
+    - smardigo_management_action is defined

 - name: "Setting smardigo_auth_token_value as fact"
  set_fact:
    smardigo_auth_token_value: "{{ smardigo_user_token_result.token }}"
  tags:
    - update_deployment
+  when:
+    - scope_id is defined
+    - process_instance_id is defined
+    - smardigo_management_action is defined

 - name: "Sending smardigo management message <{{ smardigo_management_action }}> to <{{ scope_id }}/{{ process_instance_id }}>"
  uri:
--- a/templates/elastic-certs/prodwork01-certs/ca/ca.crt
+++ b/templates/elastic-certs/prodwork01-certs/ca/ca.crt
@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.crt
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.crt
@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.key
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.pkcs8.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-01/prodwork01-elastic-stack-elastic-01.pkcs8.key
@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.crt
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.crt
@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.key
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.pkcs8.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-02/prodwork01-elastic-stack-elastic-02.pkcs8.key
@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCZFwvpcp3YosXj
+87rvra3Pvj4mlhFMwVu733QC60ODj4lFgfCIcuMfA6HJUkBZ7JLKVFXfzvutDRBy
+nMDUicuua5dk2H1Ki6JY+EhsP89qre7ns7XIhXoPZCDVnGUdNCWVWPiZ0TTjSjky
+PodNGqRlMHpvoVFCJcOEGtutPG8XOgwmM7MrcSpGNTYfbwTa0N02GZKJKanBYz/y
+7sKDQjXs7CM0eZ0jEwMDu6ElNvZZDr1b8lTMa9gVbYWCcUe33GyKjml8TImkiBpu
+JsPyBKAJv6AGbgJht6nEyPoB3VsPapvM4HyjoXgcOU72p4cFU2pf/kE0YfL/GhGY
+YzbHlDPHAgMBAAECggEAPLcvOj8C61BjO60GjthK/wFslNEfu1lUkIZm9GFqPVtI
+DhEi3Hr0KPC/0aCVdRSmgyg/hqwIlPGBfHM+5wxfg6WYPZ6+0jnfAXo2/vevw5eI
+EMztY8HMTx5fB1knoRV1cm3+6sJWP27IkGzMLIBMgvVfGbbZC2r+x/3+8g3t4T++
+K0seFCTCa/jOqR3mlZsNGhK2DQoSDA06PcK77zZq1MmfdPVx+zCLXZszierf/OQ4
+CtkgpcYjuRnGNvTouaP2YHmSW8wG968CJ/L5L1oY84Lr6DzQ+/hBe7rd26u7SMAP
+gy6x4biX7QDvQHlq8GONPxuPkGy1QNUWiLoRSLeRwQKBgQDfzOz72ZgAQseJrtCj
+cykfXMkfZB0plyNZxPrkwDt8NkhIhbSv+LItj3T7MDUtysbxX+QTATEiBBzGlEc9
+wKjBQtWqMWbmPoTjR+m2imwIZm5nyVvn2ybmXUYEsXGk1BwVvvqMjI1xjqxO+A+d
+nPN3m4GMXW7BjnuEJa27r931/QKBgQCvHbIZHBVMM9rG0RiDaL4Dc6wqBt6m3wJM
+qQ7MA50fPyUw+bt7TX7KIEvWXVhb0rXmyJePQjgs0R+V3yml6YY+lIu6buvqHlSX
+SaUgm30XJjvfVBI/yYcYxvdmPVZKUbrcsfa/8Xgn5/9JkuBKEcuuqe0ADFRyeAC8
+Rd6XWiBaEwKBgGcVslbzTENafySZJDsVcWyjxXQzHgepOTxBMjupm/zD2BmnlKm1
+iQTZXk3RT71u+KH3xEtIskPz1vlVFVeJZXHXgilppfcJ9xXlau6M5eQcomAl7LJo
+TIuxjO3eefUtSl5t4GRa3U/gItghBLhZsf923n40Dy8SnSwqWtLn1/pVAoGBAJDS
+FzLq5bYigEDCNeqfWd1S8UPEcKhCcA1kFqekKXHo7+ID9gev/DY+5Vj/044EwYh9
+xdGlKv3taJiyeSgL64iforro9tOkh8KiFhzUWmwlo4g7Z+g2yzIzgfCcs1s9IjNY
+Pj9Y/EzMcXSwMisvcmodf7H1gHU2Ry1s/vvefjjfAoGBAM1O0Id3I79iWzydZLdA
+KErrc1sjKL2n6JA5VQbyeTScwr++d0JKeZaP8nbjEwIck+CshYNp4MQ1MoZQZ9Vc
+Wt007hjpnkmJboIZUUtFNkFrQAsVAVWUnXk1u9gG/xmymEmB24LoZyeaSy/3A9vx
+4ocEXGxI6FWkHPVgFOfjesxG
+-----END PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.crt
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.crt
@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.key
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.pkcs8.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-elastic-03/prodwork01-elastic-stack-elastic-03.pkcs8.key
@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.crt
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.crt
@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDdjCCAl6gAwIBAgIUIULS9J0GOpbr+aKfWyQpef+fyMEwDQYJKoZIhvcNAQEL
+BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l
+cmF0ZWQgQ0EwHhcNMjIwNjAyMDk0MTE2WhcNMjMwNjAyMDk0MTE2WjAsMSowKAYD
+VQQDEyFwcm9kd29yazAxLWVsYXN0aWMtc3RhY2stZmlsZWJlYXQwggEiMA0GCSqG
+SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlmMEXfnTK0fVeRX34OmfQtTi2bwqMeoz
+eKIUIrbRN7BOGoF+V/uwzxWFHK2yqX0U2F0QE+QFEVpaxvQd1/zFwx0OArfy/CmN
+3rcepQNCFI6OHjL7L+dd7UUMC+Ijm0IXzKFDXwVAckyH3wjZtJVgLHclcHqeuV/K
+EB0Pa3yD2nQEciMW+LLmsgz9QWx2ptY1jWWUefIcmwNAuyI3LQ7NPfK+QqD7i/MJ
+/74mfotiDzVquNVmM6Op2H+7aH/QnDAWZ5Vkm4aDGqG59Pr2PU2nDy0DByq59zg1
+QoJC5sOsClfhrQnMfOfcyqwIn0Qvm1Vz40yo6HNcow8VVOZYs3YpAgMBAAGjgYcw
+gYQwHQYDVR0OBBYEFKUtI5UBpqaS6jd9qtwXU9hyuMZ2MB8GA1UdIwQYMBaAFJMX
+ckUx3pJcaLY1+G9fTE8vA+p6MDcGA1UdEQQwMC6CCWxvY2FsaG9zdIIhcHJvZHdv
+cmswMS1lbGFzdGljLXN0YWNrLWZpbGViZWF0MAkGA1UdEwQCMAAwDQYJKoZIhvcN
+AQELBQADggEBAFLwNtyDygJbfgtFm0uF6QAKcuXit5CgbK+fVlX1IMDptEoACmtj
+uduy4CdtOEVC35LpBrHD9cd4xwy/jbHk75tm462CtDAXiM9U5ie/POZmpeZHNnzo
+tr12CYdrAdCrXowoA/zF1TimBlJKxHgD0X+xCGdRJ0WGTTvKxNqB5D71sfH3PyWe
+Ns87Bf1bqlFViZbHGZNxcXpDSOJfLgFEpDo85XeSw0Z4AE64GX7qWfrNN+Mgklsf
+EFUAxNREqzEbOXqqqqwBKM6hZBMkzuZFn4SBsjNQyUza0W1NPBopUwUuGbS6tt3N
+SZgr1yCsNI0IsBlOAT4P+2J/W+G6feIUfDs=
+-----END CERTIFICATE-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.key
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAq5ZjBF350ytH1XkV9+Dpn0LU4tm8KjHqM3iiFCK20TewThqB
+flf7sM8VhRytsql9FNhdEBPkBRFaWsb0Hdf8xcMdDgK38vwpjd63HqUDQhSOjh4y
+y/nXe1FDAviI5tCF8yhQ18FQHJMh98I2bSVYCx3JXB6nrlfyhAdD2t8g9p0BHIj
+Fviy5rIM/UFsdqbWNY1llHnyHJsDQLsiNy0OzT3yvkKg+4vzCf++Jn6LYg81arjV
+ZjOjqdh/u2h/0JwwFmeVZJuGgxqhufT69j1Npw8tAwcqufc4NUKCQubDrApX4a0J
+zHzn3MqsCJ9EL5tVc+NMqOhzXKMPFVTmWLN2KQIDAQABAoIBAE2aTl4DQqHGyU46
+3TymdAKbbzzJzNgoiwuMW4FP0e79iLdKNZa2pBZrEgiJ1+Ud0nxC/pPu6wl/t6Wm
+pXF55dBrVhCoGhnDAegv+hHZ/4c7VN3hupzwJWvNi5TPKw9/gHzTB3w41V84UnSA
+4rfTfFtqwNgl7s8qd7AjaYE307CttbpVctIl8K5jfIyPAh7bVHLzleS6/Ya0toZD
+Mzb0kIL8NejiDPNBiCHtnyiQDP9St2brbgsC0Z2Vfqyq9PyEOa32c9gcTcGy+WRM
+EhVFvGT3gZBHMQL4AYYu14qNIqo5MsMvsZvZbGLldl6KSwgag49xyaaonVtEasnP
+iP0imAECgYEA5bfwoouzK6ilv424aWLHZkh+GZ3X/vTCBApBWnr3nAZAGq77Wu3P
+P6ZpP185rD6LA2yATS6RuuC5rvVzGJCn0vt/LY8KKD5+2/zWXp2arMxe5BnyQSFH
+ECtNuN2DnJtwRof4W47T19z8321MOXopR7fAvP4Ke4gH+QRwXnqOoskCgYEAvzfj
+TBqR2s+Y0WiGmuZKpTa3MTh5Ke8Zw30B9I9MZIwmdu+iA+IU6CX5Svji++NUL0jA
+MYP51A2rzaUxbuyLoUil63lkiyDhL+BPrsiAwcokGiJsuN1/rnImR2ovAmFpGtkH
+NW5HFSTkc6VWafiguxRS/OdxzGegWrGFOTJFiGECgYArYxRl/vC2PEIh7ch4zxlO
+Lj7y46caFmxWiwFQ74y4wU12PLposCXGpc2XFIs2BxIGcYXCDhukKjGn49/7Mccg
+yDN7DVsjwrn/Hr/2WtoN7QO3HVduCbT8TtF9KwlimNEZ4TB9SnqkeK6iHGibKoGF
+dCVJDMo6DrVCyR3YGlm6UQKBgCKQ8MbGGs2qL17TfVms/ZtmC7GbGtQIw+iBxYO3
+D8ExUJa5dNks2kio7Kqv2SBdlM9DYHLS/6tkmUUAcrIxkoAiSNQLSrCXzf1AmEbp
+OdVOPD55MJwudjFLsz2/pSXSBBT1XIc9Gx5oX9/D6J4Zcry+zM2o7PpdVTBv3Lxd
+KRKhAoGAQDf2q8O0WOpN4KhA9kHVyBmSDBNUGWWLNdKdwCOE1TQ2PML15zeeiRn6
+QYnXY+Myp1jyXgn9vOynmm4EItftJYrTL1d33HopND24TCicgm3pKFwAkGLSi88a
+EW7pEY7kMXI4f1Br2t+2m8+T/al/HoqYmuvPZxW+ItBBpxH+2x0=
+-----END RSA PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.pkcs8.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-filebeat/prodwork01-elastic-stack-filebeat.pkcs8.key
@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.crt
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.crt
@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.key
@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.pkcs8.key
+++ b/templates/elastic-certs/prodwork01-certs/prodwork01-elastic-stack-logstash-01/prodwork01-elastic-stack-logstash-01.pkcs8.key
@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
--- a/templates/elastic-certs/prodwork01-instances.yaml
+++ b/templates/elastic-certs/prodwork01-instances.yaml
@ -0,0 +1,25 @@
+---
+
+instances:
+  - name: prodwork01-elastic-stack-elastic-01
+    dns:
+      - localhost
+      - prodwork01-elastic-stack-elastic-01
+  - name: prodwork01-elastic-stack-elastic-02
+    dns:
+      - localhost
+      - prodwork01-elastic-stack-elastic-02
+  - name: prodwork01-elastic-stack-elastic-03
+    dns:
+      - localhost
+      - prodwork01-elastic-stack-elastic-03
+
+  - name: prodwork01-elastic-stack-logstash-01
+    dns:
+      - localhost
+      - prodwork01-elastic-stack-logstash-01
+
+  - name: prodwork01-elastic-stack-filebeat
+    dns:
+      - localhost
+      - prodwork01-elastic-stack-filebeat