sharang
6cd1a1546c
Lands the per-VM × per-service manifest tree, per-env overlays, VM specs
for SysEleven provisioning, DNS zone placeholder, plan/apply/validate
scripts, and a Makefile.
Structure (per INFRASTRUCTURE.md §2 + IMPLEMENTATION_PLAN.md M1.1):
- manifests/{vm-edge,vm-control,vm-data,stage}/<service>.toml — 35 stubs
- overlays/{dev,stage,prod}/overlay.toml — env-selection rules
- vms/{vm-edge,vm-control,vm-data,stage}.toml — OpenStack flavor/IP/firewall
- dns/yourplatform.com.zone.template — PowerDNS zone (body lands in M0.3)
- cluster.toml.tmpl — cluster-level config rendered per env
- scripts/validate.sh — TOML parse + structural sanity
- scripts/plan.sh — merge manifests + overlay → .orca-out/<env>/
- scripts/apply.sh — push to Orca controller (no-op until M1.2)
- Makefile — validate / plan / apply / diff / clean
Each manifest header names the milestone that finalises its real values;
images today are 'placeholder' for services that need their own repo to
exist first. make validate stays green; apply gates on ORCA_API_URL.
CI workflow swapped from the broken 'orca validate' to 'make validate',
which calls a Python TOML parser plus structural checks (placement.node
matches vm dir, resources.memory present, no mis-nested keys).
Refs: M1.1
21 lines
608 B
TOML
21 lines
608 B
TOML
# vm-control — Control plane (portal, tenant-registry, ERPNext, Stalwart).
|
|
# See INFRASTRUCTURE.md §1, §2, §6.
|
|
|
|
[vm]
|
|
name = "vm-control"
|
|
env = "prod"
|
|
flavor = "m2.medium" # 4 vCPU, 16 GB RAM
|
|
public_ip = false # only reachable via vm-edge orca-proxy
|
|
region = "DUS2"
|
|
private_network = "platform-prod"
|
|
private_ip_cidr = "10.0.2.0/24"
|
|
|
|
[vm.disk]
|
|
block_volume_gb = 250 # MariaDB (ERPNext) + Stalwart mail spool, medium growth
|
|
|
|
[vm.firewall]
|
|
ingress_public = [] # no public ingress
|
|
ingress_private = [
|
|
{ proto = "tcp", ports = "all", source = "10.0.0.0/16", purpose = "intra-platform" },
|
|
]
|