fluffy: deploy fluffy on DO droplet

Referenced issue: #221

Signed-off-by: markoburcul <[email protected]>

Author: markoburcul

ansible/fluffy.yml

@@ -12,7 +12,7 @@
 - name: Configure Nimbus Fluffy nodes
   become: true
   hosts:
-    - nimbus.fluffy
+    - nimbus-fluffy-metal
   roles:
     # Extra 32 IPv4 addresses for each of the nodes on the host.
     - { role: update-netplan,           tags: update-netplan }
@@ -37,3 +37,13 @@
     - { role: infra-role-open-ports,    tags: open-ports    }
     - { role: infra-role-nimbus-fluffy, tags: nimbus-fluffy }
     - { role: infra-role-portal-bridge, tags: portal-bridge }
+
+- name: Configure Nimbus Fluffy droplet
+  become: true
+  hosts:
+    - nimbus-fluffy-droplet
+  roles:
+    - { role: infra-role-swap-file,     tags: swap-file      }
+    - { role: infra-role-open-ports,    tags: open-ports     }
+    - { role: infra-role-smart-metrics, tags: smart-metrics  }
+    - { role: infra-role-nimbus-fluffy, tags: nimbus-fluffy  }

ansible/host_vars/node-01.do-ams3.nimbus.fluffy.yml

@@ -0,0 +1,16 @@
+---
+# Necessary in order to build fluffy on the droplet with 1GB RAM
+swap_file_size_mb: 6144
+
+nimbus_fluffy_service_name: 'nimbus-fluffy-{{ nimbus_fluffy_network }}-{{ nimbus_fluffy_repo_branch }}-01'
+nimbus_fluffy_listening_port:   9100
+nimbus_fluffy_metrics_port: '9201'
+nimbus_fluffy_rpc_port:     '9901'
+nimbus_fluffy_build_jobs: '1'
+# Testing how low we can go on the storage capacity
+nimbus_fluffy_storage_capacity: '2000'
+
+open_ports_list:
+  nimbus-fluffy:
+    - { comment: 'Nimbus Fluffy',          port: '{{ nimbus_fluffy_listening_port }}',                                      protocol: 'udp' }
+    - { comment: 'Nimbus Fluffy Metrics',  port: '{{ nimbus_fluffy_metrics_port }}',   ipset: 'hq.metrics', iifname: 'wg0', protocol: 'tcp' }

ansible/inventory/test

@@ -51,6 +51,7 @@ neth-03.ih-eu-mda1.nimbus.holesky ansible_host=194.33.40.254 data_center=ih-eu-m
 neth-04.ih-eu-mda1.nimbus.holesky ansible_host=185.181.229.100 data_center=ih-eu-mda1 dns_domain=status.im dns_entry=neth-04.ih-eu-mda1.nimbus.holesky.status.im env=nimbus region=eu-mda1 stage=holesky
 neth-05.ih-eu-mda1.nimbus.holesky ansible_host=185.181.229.103 data_center=ih-eu-mda1 dns_domain=status.im dns_entry=neth-05.ih-eu-mda1.nimbus.holesky.status.im env=nimbus region=eu-mda1 stage=holesky
 node-01.aws-eu-central-1a.dash.nimbus ansible_host=52.28.100.116 data_center=aws-eu-central-1a dns_domain=status.im dns_entry=node-01.aws-eu-central-1a.dash.nimbus.status.im env=dash region=eu-central-1a stage=nimbus
+node-01.do-ams3.nimbus.fluffy ansible_host=143.244.196.233 data_center=do-ams3 dns_domain=status.im dns_entry=node-01.do-ams3.nimbus.fluffy.status.im env=nimbus region=ams3 stage=fluffy
 store-01.he-eu-hel1.logs.nimbus ansible_host=65.108.226.62 data_center=he-eu-hel1 dns_domain=status.im dns_entry=store-01.he-eu-hel1.logs.nimbus.status.im env=logs region=eu-hel1 stage=nimbus
 store-02.he-eu-hel1.logs.nimbus ansible_host=65.109.62.247 data_center=he-eu-hel1 dns_domain=status.im dns_entry=store-02.he-eu-hel1.logs.nimbus.status.im env=logs region=eu-hel1 stage=nimbus
 store-03.he-eu-hel1.logs.nimbus ansible_host=65.109.49.101 data_center=he-eu-hel1 dns_domain=status.im dns_entry=store-03.he-eu-hel1.logs.nimbus.status.im env=logs region=eu-hel1 stage=nimbus
@@ -65,6 +66,9 @@ node-01.aws-eu-central-1a.dash.nimbus
 [dash.nimbus]
 node-01.aws-eu-central-1a.dash.nimbus
 
+[do-ams3]
+node-01.do-ams3.nimbus.fluffy
+
 [he-eu-hel1]
 bench-01.he-eu-hel1.nimbus.eth1
 bench-02.he-eu-hel1.nimbus.eth1
@@ -134,6 +138,9 @@ bench-02.he-eu-hel1.nimbus.eth1
 [nimbus-eth1-metal]
 metal-01.ih-eu-mda1.nimbus.eth1
 
+[nimbus-fluffy-droplet]
+node-01.do-ams3.nimbus.fluffy
+
 [nimbus-fluffy-metal]
 metal-01.ih-eu-mda1.nimbus.fluffy
 metal-02.ih-eu-mda1.nimbus.fluffy
@@ -217,6 +224,7 @@ metal-01.ih-eu-mda1.nimbus.eth1
 [nimbus.fluffy]
 metal-01.ih-eu-mda1.nimbus.fluffy
 metal-02.ih-eu-mda1.nimbus.fluffy
+node-01.do-ams3.nimbus.fluffy
 
 [nimbus.geth]
 holesky-01.ih-eu-mda1.nimbus.geth

ansible/requirements.yml

@@ -54,7 +54,7 @@
 
 - name: infra-role-nimbus-fluffy
   src: [email protected]:status-im/infra-role-nimbus-fluffy.git
-  version: 4705f3d457d83fc7e9c3e6e25b2471bdec98dd6b
+  version: 0b245e8781481fb4e1f6192b0633d97b48acd372
 
 - name: infra-role-portal-bridge
   src: [email protected]:status-im/infra-role-portal-bridge.git

fluffy.tf

@@ -18,3 +18,12 @@ module "nimbus_nodes_fluffy_innova" {
     "194.33.40.239", # metal-02.ih-eu-mda1.nimbus.fluffy
   ]
 }
+
+/* Testing instance for Fluffy deployment */
+module "fluffy_droplet" {
+  source = "github.com/status-im/infra-tf-digital-ocean"
+  env    = "nimbus"
+  stage  = "fluffy"
+  group  = "nimbus-fluffy-droplet"
+  type   = "s-1vcpu-1gb"
+}

providers.tf

@@ -4,6 +4,12 @@ provider "aws" {
   secret_key = data.pass_password.aws_secret_key.password
 }
 
+provider "digitalocean" {
+  token             = data.pass_password.digitalocean_token.password
+  spaces_access_id  = data.pass_password.digitalocean_spaces_id.password
+  spaces_secret_key = data.pass_password.digitalocean_spaces_key.password
+}
+
 provider "google" {
   credentials = data.pass_password.google_cloud_cred_json.full
   project     = "russia-servers"

secrets.tf

@@ -22,3 +22,18 @@ data "pass_password" "aws_secret_key" {
 data "pass_password" "google_cloud_cred_json" {
   path = "cloud/GoogleCloud/json"
 }
+
+/* Token for interacting with DigitalOcean API. */
+data "pass_password" "digitalocean_token" {
+  path = "cloud/DigitalOcean/token"
+}
+
+/* Access key for Digital Ocean Spaces API. */
+data "pass_password" "digitalocean_spaces_id" {
+  path = "cloud/DigitalOcean/spaces-id"
+}
+
+/* Secret key for Digital Ocean Spaces API. */
+data "pass_password" "digitalocean_spaces_key" {
+  path = "cloud/DigitalOcean/spaces-key"
+}

versions.tf

@@ -11,5 +11,8 @@ terraform {
       source  = "camptocamp/pass"
       version = " = 2.1.1"
     }
+    digitalocean = {
+      source  = "digitalocean/digitalocean"
+    }
   }
 }