|
|
@ -1,4 +1,5 @@ |
|
|
|
#+TITLE: Scalable ConcourseCI with Nomad and Nix |
|
|
|
#+DATE: <2021-02-14 Sun> |
|
|
|
|
|
|
|
In this blog post, I will explain to you how you can deploy ConcourseCI on HashiCorp Nomad with fully automatic and |
|
|
|
Op-free scaling. We will utilize 3 HashiCorp tools, namely Nomad, Vault, and Consul, then PosgresSQL, Nix (not |
|
|
@ -77,14 +78,14 @@ necessary, can be replaced) and finally ConcourseCI itself. |
|
|
|
*** Policies |
|
|
|
We'll need 3 policies, =concourse-web-policy=, =concourse-worker-policy= and =concourse-db-policy=. |
|
|
|
|
|
|
|
#+TITLE: concourse-db-policy.hcl |
|
|
|
#+NAME: concourse-db-policy.hcl |
|
|
|
#+BEGIN_SRC hcl |
|
|
|
path "kv/data/concourse/db" { |
|
|
|
capabilities = ["read"] |
|
|
|
} |
|
|
|
#+END_SRC |
|
|
|
|
|
|
|
#+TITLE: concourse-web-policy.hcl |
|
|
|
#+NAME: concourse-web-policy.hcl |
|
|
|
#+BEGIN_SRC hcl |
|
|
|
path "kv/data/concourse/workers/*" { |
|
|
|
capabilities = ["read"] |
|
|
@ -103,7 +104,7 @@ necessary, can be replaced) and finally ConcourseCI itself. |
|
|
|
} |
|
|
|
#+END_SRC |
|
|
|
|
|
|
|
#+TITLE: concourse-worker-policy.hcl |
|
|
|
#+NAME: concourse-worker-policy.hcl |
|
|
|
#+BEGIN_SRC hcl |
|
|
|
path "kv/data/concourse/workers/*" { |
|
|
|
capabilities = ["read", "update", "delete"] |
|
|
|