asteris-llc/converge

param "internal-ip" {}

param "etcd-url" {
  default = "https://github.com/coreos/etcd/releases/download/v3.0.14/etcd-v3.0.14-linux-amd64.tar.gz"
}

param "etcd-destination" {
  default = "/usr/local/bin/"
}

param "etcd-initial-cluster" {
  default = "{{param `etcd-node-name`}}=https://{{param `internal-ip`}}:2380"
}

param "etcd-data-dir" {
  default = "/var/lib/etcd"
}

param "ssl-directory" {
  default = "/etc/kubernetes/ssl"
}

param "etcd-node-name" {
  default = "{{lookup `task.query.hostname.status.stdout`}}"
}

task.query "hostname" {
  query = "hostname | xargs echo -n"
}

module "install-binary.hcl" "etcd" {
  params {
    url           = "{{param `etcd-url`}}"
    name          = "etcd"
    download_name = "etcd.tar.gz"
    destination   = "{{param `etcd-destination`}}"
    working_dir   = "/tmp/"
    extract       = "tar.gz"
    extracted_dir = "etcd-v3.0.14-linux-amd64/"
    cleanup       = false
  }
}

module "install-binary.hcl" "etcdctl" {
  params {
    url           = "{{param `etcd-url`}}"
    name          = "etcdctl"
    download_name = "etcd.tar.gz"
    destination   = "{{param `etcd-destination`}}"
    working_dir   = "/tmp/"
    extract       = "tar.gz"
    extracted_dir = "etcd-v3.0.14-linux-amd64/"
    cleanup       = true
  }

  depends = ["module.etcd"]
}

file.directory "etcd-data-dir" {
  destination = "{{param `etcd-data-dir`}}"
  create_all  = true
}

file.content "etcd-service" {
  destination = "/etc/systemd/system/etcd.service"
  content     = "{{param `etcd-service`}}"
}

task "etcd-enable" {
  check   = "systemctl is-enabled etcd"
  apply   = "systemctl daemon-reload; systemctl enable etcd"
  depends = ["file.content.etcd-service"]
}

task "etcd-start" {
  check   = "systemctl is-active etcd"
  apply   = "systemctl daemon-reload; systemctl start etcd"
  depends = ["task.etcd-enable"]
}

param "etcd-service" {
  default = <<EOF
[Unit]
Description=etcd
Documentation=https://github.com/coreos

[Service]
ExecStart=/usr/local/bin/etcd --name {{param `etcd-node-name`}} \
  --cert-file={{param `ssl-directory`}}/kubernetes.pem \
  --key-file={{param `ssl-directory`}}/kubernetes-key.pem \
  --peer-cert-file={{param `ssl-directory`}}/kubernetes.pem \
  --peer-key-file={{param `ssl-directory`}}/kubernetes-key.pem \
  --trusted-ca-file={{param `ssl-directory`}}/ca.pem \
  --peer-trusted-ca-file={{param `ssl-directory`}}/ca.pem \
  --initial-advertise-peer-urls https://{{param `internal-ip`}}:2380 \
  --listen-peer-urls https://{{param `internal-ip`}}:2380 \
  --listen-client-urls https://{{param `internal-ip`}}:2379,http://127.0.0.1:2379 \
  --advertise-client-urls https://{{param `internal-ip`}}:2379 \
  --initial-cluster-token etcd-cluster-0 \
  --initial-cluster {{param `etcd-initial-cluster`}} \
  --initial-cluster-state new \
  --data-dir=/var/lib/etcd
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target
EOF
}