wangjia
3d5bac66b4
IaC 面 (infra/) 与控制面 (server/internal/provision) 双产出，落地 doc/04 §4 「节点是牲口」弹性拓扑与 make-before-break 一键更换。 server/internal/provision: - CloudAdapter 适配层 + Registry（首发 vultr 消耗品池 / hetzner 精品池各一）； 厂商凭证仅从 PROVISION_<VENDOR>_* env 注入，不入库不入 git。 - ProvisionService：CreateNode(幂等键重放不重复开机)、DestroyNode(幂等)、 RotateIP(换 IP 不换机 + version bump)、ListProviders。 - Replace 一键更换：先建后拆，新机 up 先于旧机 draining（容量不下降）， replacement_uuid 幂等键 + replacements 表分步记录，崩溃可续跑不重复。 - RotatePool：池内滚动轮换，并发度 1–2。 - cmd/nodectl CLI：create/destroy/rotate-ip/replace/rotate-pool/providers。 - 单测（mock 厂商 API + 内存 Store）：幂等重放、make-before-break 时序断言、 开机失败/探活超时→destroyed+失败计数+告警钩子、崩溃续跑、RotatePool。 infra/: - terraform/：探针机 + 控制面基线模块化（probe / control-plane）+ README， 低频基线进 state，节点不进 Terraform。 - cloud-init/node.yaml.tmpl：节点引导模板（注入一次性 bootstrap token，task #5）。 - identity-isolation.md：身份隔离登记表（doc/06 §2 红线，无任何凭证）。 migrations/000008：nodes 增 provider_instance_id/elastic_ip_id、node_events 增 ip_rotated、provision_idempotency / replacements 表（附加式，不动现网）。 红线：仅面向新厂商池，绝不纳管现网生产 EC2(deploy/ marzban)。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
54 lines
1.7 KiB
Terraform
54 lines
1.7 KiB
Terraform
variable "hcloud_token" {
|
|
description = "Hetzner Cloud API token for the PROBE/management account ONLY (independent identity; never the data-plane vendor accounts). Inject via TF_VAR_hcloud_token / CI secret, never commit."
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "ssh_public_keys" {
|
|
description = "SSH public keys authorised on probe machines (management identity)."
|
|
type = list(string)
|
|
default = []
|
|
}
|
|
|
|
variable "probe_overseas" {
|
|
description = "Overseas reference probe points (doc/04 §4.2). Each emits a probe machine."
|
|
type = map(object({
|
|
location = string # vendor location, e.g. "hel1", "ash"
|
|
server_type = string # e.g. "cpx11"
|
|
}))
|
|
default = {
|
|
eu = { location = "hel1", server_type = "cpx11" }
|
|
us = { location = "ash", server_type = "cpx11" }
|
|
}
|
|
}
|
|
|
|
variable "probe_image" {
|
|
description = "OS image for probe machines."
|
|
type = string
|
|
default = "debian-12"
|
|
}
|
|
|
|
variable "control_plane_enabled" {
|
|
description = "Whether to manage the control-plane baseline env in this state. Off by default — the control plane is provisioned once and rarely changes."
|
|
type = bool
|
|
default = false
|
|
}
|
|
|
|
variable "control_plane_server_type" {
|
|
description = "Server type for the control-plane host (API + MySQL + Redis), if managed here."
|
|
type = string
|
|
default = "cpx21"
|
|
}
|
|
|
|
variable "control_plane_location" {
|
|
description = "Location for the control-plane host."
|
|
type = string
|
|
default = "hel1"
|
|
}
|
|
|
|
variable "admin_allowlist_cidrs" {
|
|
description = "CIDRs allowed to reach the admin/SSH surface of the control plane (doc/06 §2: admin never on public internet)."
|
|
type = list(string)
|
|
default = []
|
|
}
|